{"resultsPerPage":679,"startIndex":0,"totalResults":679,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-29T21:47:01.628","vulnerabilities":[{"cve":{"id":"CVE-1999-0428","sourceIdentifier":"cve@mitre.org","published":"1999-03-22T05:00:00.000","lastModified":"2026-06-16T21:48:22.500","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-384"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.2b","matchCriteriaId":"E717640E-3476-48AC-8674-7E8F080C7EB8"}]}]}],"references":[{"url":"http://www.osvdb.org/3936","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/3936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2000-0535","sourceIdentifier":"cve@mitre.org","published":"2000-06-12T04:00:00.000","lastModified":"2026-06-16T21:51:56.717","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"E3F7EB61-55A5-4776-B0E7-3508920A6CEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3B13D898-C1B6-44B9-8432-7DDB8A380E9E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2000-06/0083.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1340","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-06/0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1141","sourceIdentifier":"cve@mitre.org","published":"2001-07-10T04:00:00.000","lastModified":"2026-06-16T21:55:39.927","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssleay:ssleay:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"29C56055-3DB2-4A23-8301-6F6AB4BA38AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssleay:ssleay:0.9:*:*:*:*:*:*:*","matchCriteriaId":"76F1B179-25A4-4A72-9E42-43DA61CA1475"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssleay:ssleay:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"127DE515-7313-40EC-BD5A-57CA8EF69F8E"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-013.txt.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1483.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/853","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-051.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/3475","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/195829","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3004","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6823","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-013.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1483.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/3475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/195829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0655","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2026-06-16T21:57:52.677","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code."},{"lang":"es","value":"OpenSSL 0.9.6.d y anteriores, y 0.9.7-beta2 y anteriores, no manejan adecuadamente las representaciones ASCII de enteros en plataformas de 64 bits, lo que podría permitir a atacantes causar una denegación de servicio y posiblemente ejecutar código arbitrario."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DABDE61F-A7DD-40A4-9569-8525A63BAA56"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FFAA0056-56FF-4D0F-8B44-066A4BFED1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6C3C821C-C479-4AAC-84EA-63C798CAB00A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.3:*:*:*:*:*:*:*","matchCriteriaId":"CCAF6167-65C1-4ACB-A75A-53922B64D281"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B72A661-9EAA-4B9B-8865-17C8A29871BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7485BFF1-6863-4165-BE36-D656F39CF5EF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/308891","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5364","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/308891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0656","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2026-06-16T21:57:52.810","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3."},{"lang":"es","value":"Desbordamiento de búfer en OpenSSL 0.9.6d y anteriores, y 0.9.7-beta2 y anteriores, permite a atacantes remotos ejecutar código arbitrario mediante \r\nuna clave maestra de cliente larga en SSL2 o\r\nun ID de sesión largo en SSL3"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DABDE61F-A7DD-40A4-9569-8525A63BAA56"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FFAA0056-56FF-4D0F-8B44-066A4BFED1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6C3C821C-C479-4AAC-84EA-63C798CAB00A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.3:*:*:*:*:*:*:*","matchCriteriaId":"CCAF6167-65C1-4ACB-A75A-53922B64D281"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B72A661-9EAA-4B9B-8865-17C8A29871BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7485BFF1-6863-4165-BE36-D656F39CF5EF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9714.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9716.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/102795","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/258555","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5362","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5363","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9714.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9716.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/102795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/258555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0657","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2026-06-16T21:57:52.960","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key."},{"lang":"es","value":"Desbordamiento de búfer en OpenSSL 0.9.7 anterior a 0.9.7-beta3, con Kerberos activado, permite a atacantes ejecutar código arbitrario mediante una clave maestra larga."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9715.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/561275","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5361","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9715.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/561275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0659","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2026-06-16T21:57:53.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings."},{"lang":"es","value":"La librería ASN1 de Open SSL 0.9.6d y anterior, y 0.9.7-beta2 y anterior, permite que atacantes remotos provoquen una denegación de servicio por medio de codificaciones inválidas."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DABDE61F-A7DD-40A4-9569-8525A63BAA56"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FFAA0056-56FF-4D0F-8B44-066A4BFED1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6C3C821C-C479-4AAC-84EA-63C798CAB00A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.3:*:*:*:*:*:*:*","matchCriteriaId":"CCAF6167-65C1-4ACB-A75A-53922B64D281"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B72A661-9EAA-4B9B-8865-17C8A29871BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7485BFF1-6863-4165-BE36-D656F39CF5EF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000516","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-160.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-161.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-164.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9718.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/748355","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5366","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-160.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-161.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-164.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9718.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/748355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5366","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0078","sourceIdentifier":"cve@mitre.org","published":"2003-03-03T05:00:00.000","lastModified":"2026-06-16T22:01:28.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak (timing discrepancy) that may make it easier to launch cryptographic attacks that rely on distinguishing between padding and MAC verification errors, possibly leading to extraction of the original plaintext, aka the \"Vaudenay timing attack.\""},{"lang":"es","value":"ssl3_get_record en s3_ptk.c de OpenSSL anteriores a 0.9.7a y 0.9.6 anteriores a 0.9.6i no realiza un cálculo MAC si un relleno de bloque de cifra incorrecto es usado, lo que causa una fuga de información (discrepancia en temporización) que puede hacer más fácil lanzar ataques criptográficos que dependan de distinguir entren errores de relleno o de verificación de MAC, posiblemente conducentes a la extracción del texto plano original, también conocida como \"Ataque de temporización de Vaudenay\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.6i","matchCriteriaId":"7693CC10-F1E9-47D4-81C0-EF0E3D9CAE10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:-:*:*:*:*:*:*","matchCriteriaId":"CC626D0B-6D4F-4727-8933-B9EE7546ABA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B86C77AB-B8FF-4376-9B4E-C88417396F3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-001.txt.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030501-01-I","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000570","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=104567627211904&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=104568426824439&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=104577183206905&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/n-051.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2003/dsa-253","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/11369.php","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-2874.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:020","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openssl.org/news/secadv_20030219.txt","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3945","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-062.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-063.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-082.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-104.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-205.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/6884","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.trustix.org/errata/2003/0005","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-001.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030501-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=104567627211904&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=104568426824439&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=104577183206905&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/n-051.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2003/dsa-253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/11369.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-2874.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openssl.org/news/secadv_20030219.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-062.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-063.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-104.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-205.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/6884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.trustix.org/errata/2003/0005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2003-0131","sourceIdentifier":"cve@mitre.org","published":"2003-03-24T05:00:00.000","lastModified":"2026-06-16T22:01:36.313","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the \"Klima-Pokorny-Rosa attack.\""},{"lang":"es","value":"Los componentes SSL y TLS de OpenSSL 0.9.6i y anteriores, y 0.9.7a permite a atacantes remotos llevar a cabo una operación de clave privada RSA mediante un ataque de Bleichenbacher modificado que usa un número largo de conexiones SSL o TLS usando relleno PKCS #1 v1.5 que causa que OpenSSL filtre información sobre la la relación entre el texto cifrado y el texto plano asociado. También conocida como \"ataque Klima-Pokorny-Rosa\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-007.txt.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-014.0.txt","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030501-01-I","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000625","source":"cve@mitre.org"},{"url":"http://eprint.iacr.org/2003/052/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00028.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104811162730834&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104852637112330&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104878215721135&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-288","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200303-20.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/888801","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/immunix_advisory-3066.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2003:035","source":"cve@mitre.org"},{"url":"http://www.openpkg.org/security/OpenPKG-SA-2003.026-openssl.html","source":"cve@mitre.org"},{"url":"http://www.openssl.org/news/secadv_20030319.txt","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-101.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-102.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/7148","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11586","source":"cve@mitre.org"},{"url":"https://lists.opensuse.org/opensuse-security-announce/2003-04/msg00005.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A461","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-007.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-014.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030501-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://eprint.iacr.org/2003/052/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104811162730834&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104852637112330&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104878215721135&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200303-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/888801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/immunix_advisory-3066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2003:035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openpkg.org/security/OpenPKG-SA-2003.026-openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20030319.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/7148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.opensuse.org/opensuse-security-announce/2003-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A461","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2003-0147","sourceIdentifier":"cve@mitre.org","published":"2003-03-31T05:00:00.000","lastModified":"2026-06-16T22:01:38.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms (\"Karatsuba\" and normal)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:*:*:*:*:*:*:*:*","matchCriteriaId":"F74941A0-97CA-44D4-B55B-9224F051D40F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:1.1:*:*:*:*:*:*:*","matchCriteriaId":"85CCF640-211C-4EC0-9F41-68F5B39CA3F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B6ADD463-E918-4F4D-9FA7-D109EBC98BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.7:*:*:*:*:*:*:*","matchCriteriaId":"185B6AF8-18E7-4E6A-A7B9-60DFB17F33E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8:*:*:*:*:*:*:*","matchCriteriaId":"400FE849-D547-44DE-B06F-5B68E5B20E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.9:*:*:*:*:*:*:*","matchCriteriaId":"C236DC35-A2F7-47FB-AD51-17D2A0FD7DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.10:*:*:*:*:*:*:*","matchCriteriaId":"B256301B-9C6A-4BA6-8318-675C0EF4C316"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.11:*:*:*:*:*:*:*","matchCriteriaId":"EC33DAEE-8F51-404F-B5C4-B8A30B467E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.12:*:*:*:*:*:*:*","matchCriteriaId":"1FCDC66D-3BF5-4763-8877-38B0D3326E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.13:*:*:*:*:*:*:*","matchCriteriaId":"75772E28-BD93-4981-96FA-CDF41DAF65AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.14:*:*:*:*:*:*:*","matchCriteriaId":"2415230E-4F66-4DDE-9E34-F685E8F4085A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.15:*:*:*:*:*:*:*","matchCriteriaId":"5121749D-3E19-4A9B-8C2D-84420A4E289B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.16:*:*:*:*:*:*:*","matchCriteriaId":"6E14DE44-69E6-4D0E-AD06-A829AFCDE528"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.17:*:*:*:*:*:*:*","matchCriteriaId":"3D5B202D-D93D-4E33-BC9F-DA44B727C0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.18:*:*:*:*:*:*:*","matchCriteriaId":"CCC62D42-832D-4E6E-93D9-E7BA0CBC7799"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.19:*:*:*:*:*:*:*","matchCriteriaId":"B5D49F98-9A24-464A-8695-58218C14B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.20:*:*:*:*:*:*:*","matchCriteriaId":"ADFFE78D-90EC-46C6-B215-2EADD9E0D146"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21:*:*:*:*:*:*:*","matchCriteriaId":"6132108C-C344-4ABC-AF40-1925830A6723"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.22:*:*:*:*:*:*:*","matchCriteriaId":"F16BDA03-BFAB-4839-A83A-370865928225"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6FC396CE-FDA7-480C-9E94-1A26B7FB208E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.01:*:*:*:*:*:*:*","matchCriteriaId":"C7B30722-13DD-41C5-9CFA-0719B351CF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.02:*:*:*:*:*:*:*","matchCriteriaId":"722BA04D-BA9B-427C-B129-06EFEC3F2859"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.03:*:*:*:*:*:*:*","matchCriteriaId":"2891FF7D-E62E-47F4-8873-1E4066247348"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.04:*:*:*:*:*:*:*","matchCriteriaId":"6A129110-60C1-46FC-9817-6E3802ADB389"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-014.0.txt","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030501-01-I","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0130.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000625","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104766550528628&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104792570615648&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104819602408063&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104829040921835&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104861762028637&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-288","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200303-23.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/997481","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:035","source":"cve@mitre.org"},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.019.html","source":"cve@mitre.org"},{"url":"http://www.openssl.org/news/secadv_20030317.txt","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-101.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-102.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/316165/30/25370/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/316165/30/25370/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/316165/30/25370/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/316165/30/25370/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A466","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-014.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030501-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0130.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104766550528628&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104792570615648&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104819602408063&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104829040921835&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104861762028637&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200303-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/997481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20030317.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/316165/30/25370/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/316165/30/25370/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/316165/30/25370/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/316165/30/25370/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/316577/30/25310/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A466","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2002-1568","sourceIdentifier":"cve@mitre.org","published":"2003-11-17T05:00:00.000","lastModified":"2026-06-16T21:59:34.167","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service (crash) via certain messages that cause OpenSSL to abort from a failed assertion, as demonstrated using SSLv2 CLIENT_MASTER_KEY messages, which are not properly handled in s2_srvr.c."},{"lang":"es","value":"OpenSSL 0.96e usa aserciones cuando detecta ataques de desbordamineto de búfer en vez de mencanismos menos severos,lo que permite a atacantes remotos causar una denegación de servicio (caída) mediante ciertos mensajes que hacen que OpenSSL aborte de una aserción fallida, como se ha demostrado usando mensajes SSLv2 CLIENT_MASTER_KEY, que no son manejados adecuadamente en s2_srvr.c"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"}]}]}],"references":[{"url":"http://cvs.openssl.org/chngview?cn=7659","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=106511018214983","source":"cve@mitre.org"},{"url":"http://www.ebitech.sk/patrik/SA/SA-20031002.txt","source":"cve@mitre.org"},{"url":"http://cvs.openssl.org/chngview?cn=7659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=106511018214983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ebitech.sk/patrik/SA/SA-20031002.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0543","sourceIdentifier":"cve@mitre.org","published":"2003-11-17T05:00:00.000","lastModified":"2026-06-16T22:02:24.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values."},{"lang":"es","value":"Desbordamiento de enteros en OpenSSL 0.9.6 y 0.9.7 permite a atacantes remotos causar una denegación de servicio (caída) mediante un certificado  SSL de cliente con ciertos valores en la etiqueta ASN.1."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=104893","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22249","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201029-1","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21247112","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2003-26.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.debian.org/security/2003/dsa-393","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-394","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/255484","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-3693.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-291.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-292.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/8732","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2003/006489/openssl.htm","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/3900","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4254","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5292","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=104893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201029-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21247112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2003-26.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.debian.org/security/2003/dsa-393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/255484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-3693.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-291.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-292.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/8732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2003/006489/openssl.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5292","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"For Red Hat Enterprise Linux 2.1 OpenSSL packages (openssl, openssl096, openssl095a) issue was addressed via RHSA-2003:293.\n\nThe OpenSSL packages in Red Hat Enterprise Linux 3 and 4 (openssl, openssl096b) contain a backported patch since their initial release.\n\nThe OpenSSL packages in Red Hat Enterprise Linux 5 are based on fixed upstream release (openssl), or contain backported patch since their initial release (openssl097a).\n","lastModified":"2008-07-07T00:00:00"}]}},{"cve":{"id":"CVE-2003-0544","sourceIdentifier":"cve@mitre.org","published":"2003-11-17T05:00:00.000","lastModified":"2026-06-16T22:02:24.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used."},{"lang":"es","value":"OpenSSL 0.9.6 y 0.9.7no lleva bien la cuenta del número de caractéres de ciertas entradas ASN.1, lo que permite a atacantes remotos causar una denegación de servicio (caída) mediante un certifiucado que hace que OpenSSL lea más allá del búfer cuando una forma larga es usada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=104893","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22249","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201029-1","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21247112","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2003-26.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.debian.org/security/2003/dsa-393","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-394","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/380864","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-3693.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-291.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-292.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8732","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2003/006489/openssl.htm","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/3900","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43041","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4574","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=104893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201029-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21247112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2003-26.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.debian.org/security/2003/dsa-393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/380864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-3693.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-291.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-292.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2003/006489/openssl.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4574","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"For Red Hat Enterprise Linux 2.1 OpenSSL packages (openssl, openssl096, openssl095a) issue was addressed via RHSA-2003:293.\n\nThe OpenSSL packages in Red Hat Enterprise Linux 3 and 4 (openssl, openssl096b) contain a backported patch since their initial release.\n\nThe OpenSSL packages in Red Hat Enterprise Linux 5 are based on fixed upstream release (openssl), or contain backported patch since their initial release (openssl097a).\n","lastModified":"2008-07-07T00:00:00"}]}},{"cve":{"id":"CVE-2003-0545","sourceIdentifier":"cve@mitre.org","published":"2003-11-17T05:00:00.000","lastModified":"2026-06-16T22:02:24.593","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding."},{"lang":"es","value":"Vulnerabilidad de doble liberación (de memoria) en OpenSSL 0.9.7 permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario mediante un certificado de cliente SSL con una cierta condificación ASN.1 no válida."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"}]}]}],"references":[{"url":"http://secunia.com/advisories/22249","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21247112","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cert.org/advisories/CA-2003-26.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2003/dsa-394","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/935264","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-292.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8732","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.uniras.gov.uk/vuls/2003/006489/openssl.htm","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3900","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2590","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/22249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21247112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cert.org/advisories/CA-2003-26.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2003/dsa-394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/935264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-292.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.uniras.gov.uk/vuls/2003/006489/openssl.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  The OpenSSL packages in Red Hat Enterprise Linux 2.1 were not affected by this issue.\n\nThe OpenSSL packages in Red Hat Enterprise Linux 3 and 4 contain a backported patch since their initial release (openssl), or were not affected by this issue (openssl096b).\n\nThe OpenSSL packages in Red Hat Enterprise Linux 5 are based on fixed upstream release (openssl), or contain backported patch since their initial release (openssl097a).","lastModified":"2008-07-07T00:00:00"}]}},{"cve":{"id":"CVE-2003-0851","sourceIdentifier":"cve@mitre.org","published":"2003-12-01T05:00:00.000","lastModified":"2026-06-16T22:03:04.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences."},{"lang":"es","value":"OpenSSL 0.9.6k, cuando se ejecuta en Windows, permite a atacantes remotos causar una denegación de servicio (caída por recursión excesiva) mediante secuencias ASN.1 malformadas."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11\\)e:*:*:*:*:*:*:*","matchCriteriaId":"580BA1FE-0826-47A7-8BD3-9225E0841EDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e:*:*:*:*:*:*:*","matchCriteriaId":"040B04CD-B891-4F19-A7CC-5C2D462FBD6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sx:*:*:*:*:*:*:*","matchCriteriaId":"4DE0B5B8-DEB1-4021-B854-177C0D9FD73A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css11000_content_services_switch:*:*:*:*:*:*:*:*","matchCriteriaId":"07E1B690-C58B-4C08-A757-F3DF451FDAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pix_firewall:6.2.2_.111:*:*:*:*:*:*:*","matchCriteriaId":"ECBC761F-A8F5-4CD8-B19C-5CE8FFC58FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*","matchCriteriaId":"58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C558CED8-8342-46CB-9F52-580B626D320E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0F85D19E-6C26-429D-B876-F34238B9DAAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FEC7CCF7-CBC6-4EDC-8EDD-884DFFFBCC7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"E5011A33-CD6D-4EFC-ACFD-E51C9AE726A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4.101\\):*:*:*:*:*:*:*","matchCriteriaId":"09063867-0E64-4630-B35B-4CCA348E4DAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*","matchCriteriaId":"78F98CD7-A352-483C-9968-8FB2627A7CBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F97FE485-705F-4707-B6C6-0EF9E8A85D5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E2B925E8-D2C2-4E8C-AC21-0C422245C482"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"B9170562-872E-4C32-869C-B10FF35A925E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"D0927A68-8BB2-4F03-8396-E9CACC158FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"559DDBA3-2AF4-4A0C-B219-6779BA931F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*","matchCriteriaId":"ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5226C9CC-6933-4F10-B426-B47782C606FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"757DAE9A-B25D-4B8A-A41B-66C2897B537E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"5E3DC170-E279-4725-B9EE-6840B5685CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"CE05B514-F094-4632-B25B-973F976F6409"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.102\\):*:*:*:*:*:*:*","matchCriteriaId":"40954985-16E6-4F37-B014-6A55166AE093"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-003.txt.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106796246511667&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108403850228012&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-119.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17381","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20030930-ssl.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/412478","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.openssl.org/news/secadv_20031104.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/8970","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5528","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-003.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=106796246511667&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108403850228012&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-119.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20030930-ssl.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/412478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.openssl.org/news/secadv_20031104.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/8970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5528","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-1247","sourceIdentifier":"cve@mitre.org","published":"2004-01-15T05:00:00.000","lastModified":"2026-06-16T22:12:43.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:nsure_audit:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"01631D6A-0E07-409C-84AD-A53159537EC6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0021.html","source":"cve@mitre.org"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097379.htm","source":"cve@mitre.org"},{"url":"http://www.cirt.dk/advisories/cirt-31-advisory.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0126.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097379.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cirt.dk/advisories/cirt-31-advisory.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0126.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-0079","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2026-06-16T22:04:53.363","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference."},{"lang":"es","value":"La función  do_change_cipher_spec en OpenSSL  0.9.6c hasta 0.9.6.k y 0.9.7a hasta 0.9.7c permite que atacantes remotos provoquen una denegación de servicio (caída) mediante una hábil unión SSL/TLS que provoca un puntero nulo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-01-08T16:21:54.985893Z","id":"CVE-2004-0079","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:*:*:*:*:*:*:*:*","matchCriteriaId":"2A9CB22A-21E0-46F6-B6CD-BB38A80FA7A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B9CAFC15-178C-4176-9668-D4A04B63E77B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3C8D6949-89F4-40EF-98F4-8D15628DC345"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1_\\(3.005\\):*:*:*:*:*:*:*","matchCriteriaId":"F3DB2AEE-FB5C-42B7-845B-EDA3E58D5D68"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:2.1_\\(0.208\\):*:*:*:*:*:*:*","matchCriteriaId":"6479D85C-1A12-486D-818C-6679F415CA26"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:aaa_server:*:*:*:*:*:*:*:*","matchCriteriaId":"287CF5FA-D0EC-4FD7-9718-973587EF34DF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:apache-based_web_server:2.0.43.00:*:*:*:*:*:*:*","matchCriteriaId":"C88168D4-7DB5-4720-8640-400BB680D0FD"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:apache-based_web_server:2.0.43.04:*:*:*:*:*:*:*","matchCriteriaId":"968915A1-375B-4C69-BE11-9A393F7F1B0F"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:clientless_vpn_gateway_4400:5.0:*:*:*:*:*:*:*","matchCriteriaId":"11465DCA-72E5-40E9-9D8E-B3CD470C47E9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3954D0D1-9FDF-47D0-9710-D0FB06955B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:2.2:*:*:*:*:*:*:*","matchCriteriaId":"3D6712BD-DE8F-40F5-AC74-B9EFE9A50CFA"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E586558A-ABC3-42EB-8B4D-DC92A0D695E6"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg200:4.4:*:*:*:*:*:*:*","matchCriteriaId":"2A4C5F60-B32D-4D85-BA28-AE11972ED614"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg200:4.31.29:*:*:*:*:*:*:*","matchCriteriaId":"6A5935C3-3D83-461F-BC26-E03362115C42"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg203:4.4:*:*:*:*:*:*:*","matchCriteriaId":"80AC523B-3106-46F2-B760-803DCF8061F4"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg203:4.31.29:*:*:*:*:*:*:*","matchCriteriaId":"F8B8D6F3-D15D-489F-A807-17E63F4831F2"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg208:*:*:*:*:*:*:*:*","matchCriteriaId":"808189BA-197F-49CE-933E-A728F395749C"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg208:4.4:*:*:*:*:*:*:*","matchCriteriaId":"32DCFA7B-7BBB-465A-A4AD-7E18EE3C02DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.2:*:*:*:*:*:*:*","matchCriteriaId":"CC7EF0CD-EA39-457B-8E2E-9120B65A5835"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7BC2983F-5212-464B-AC21-8A897DEC1F58"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.4:*:*:*:*:*:*:*","matchCriteriaId":"EBF17989-D1F2-4B04-80BD-CFABDD482ABA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*","matchCriteriaId":"2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*","matchCriteriaId":"9A5309ED-D84F-4F52-9864-5B0FEEEE5022"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.05:*:*:*:*:*:*:*","matchCriteriaId":"31B1ADC1-9B6D-4B5E-A05A-D69599A3A0D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"038FEDE7-986F-4CA5-9003-BA68352B87D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D9D76A8D-832B-411E-A458-186733C66010"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11\\)e:*:*:*:*:*:*:*","matchCriteriaId":"580BA1FE-0826-47A7-8BD3-9225E0841EDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e:*:*:*:*:*:*:*","matchCriteriaId":"040B04CD-B891-4F19-A7CC-5C2D462FBD6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e12:*:*:*:*:*:*:*","matchCriteriaId":"5BF29685-7FFC-4093-A1D4-21E4871AF5C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e14:*:*:*:*:*:*:*","matchCriteriaId":"E72872C9-63AF-417F-BFAE-92B4D350C006"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)e9:*:*:*:*:*:*:*","matchCriteriaId":"80BCF196-5E5A-4F31-BCE7-AA0C748CA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"970939C5-1E6F-47B6-97E6-7B2C1E019985"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy:*:*:*:*:*:*:*","matchCriteriaId":"CD1F4148-E772-4708-8C1F-D67F969C11DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy1:*:*:*:*:*:*:*","matchCriteriaId":"3CEBCEF0-5982-4B30-8377-9CAC978A1CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F8B87C95-4B34-4628-AD03-67D1DE13E097"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2:*:*:*:*:*:*:*","matchCriteriaId":"758F95DB-E619-4B08-86FA-6CF2C1B0CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4F04471C-732F-44EE-AD1B-6305C1DD7DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3499913B-5DCD-4115-8C7B-9E8AFF79DE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E237919A-416B-4039-AAD2-7FAE1F4E100D"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"39149924-188C-40C1-B598-A9CD407C90DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3:*:*:*:*:*:*:*","matchCriteriaId":"15D5780C-4E29-4BCA-A47E-29FF6EAF33FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E6501108-5455-48FE-AA82-37AFA5D7EC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:*:*:lx:*:*:*:*:*","matchCriteriaId":"C1A3B951-A1F8-4291-82FA-AB7922D13ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:5.1.46:*:*:*:*:*:*:*","matchCriteriaId":"3F2E7C81-C0F5-4D36-9A23-03BE69295ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:s3210:*:*:*:*:*:*:*","matchCriteriaId":"9D0EF4A3-2FE5-41E4-A764-30B379ECF081"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:s3400:*:*:*:*:*:*:*","matchCriteriaId":"CCF6D59E-8AEA-4380-B86B-0803B2202F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5:*:*:*:*:*:*:*","matchCriteriaId":"140ABF28-FA39-4D77-AEB2-304962ED48C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5x:*:*:*:*:*:*:*","matchCriteriaId":"09473DD9-5114-44C5-B56C-6630FBEBCACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:100_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A7ECD3A4-5A39-4222-8350-524F11D8FFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:500:*:*:*:*:*:*:*","matchCriteriaId":"D36C140D-E80C-479A-ADA7-18E901549059"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:2000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"940712E9-B041-4B7F-BD02-7DD0AE596D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"03B887A2-9025-4C5B-8901-71BC63BF5293"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:7500_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"33264586-7160-4550-9FF9-4101D72F5C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:10000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE5E6521-0611-4473-82AC-21655F10FEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:*:*:vsx-ng-ai:*:*:*:*:*","matchCriteriaId":"AA9A50A1-CA8C-4EE5-B68F-4958F6B4B028"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:2.0:*:gx:*:*:*:*:*","matchCriteriaId":"8C83ABA2-87CD-429B-9800-590F8256B064"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp0:*:*:*:*:*:*:*","matchCriteriaId":"A4D9A576-2878-4AC4-AC95-E69CB8A84A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp1:*:*:*:*:*:*:*","matchCriteriaId":"0A1A0B02-CF33-401F-9AB2-D595E586C795"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp2:*:*:*:*:*:*:*","matchCriteriaId":"8C0EF3F0-B82E-45B7-8D05-05E76009F7A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"90FB3825-21A6-4DBE-8188-67672DBE01CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"80623E58-8B46-4559-89A4-C329AACF3CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"AEE6C228-CD93-4636-868B-C19BC1674BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"A645148C-AD0D-46C1-BEE3-10F5C9066279"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"0D69187C-7F46-4FF0-A8A0-0E1989EA79BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp0:*:*:*:*:*:*:*","matchCriteriaId":"4AE4A7EE-1BA3-46F1-BF4A-A72997EE0992"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp1:*:*:*:*:*:*:*","matchCriteriaId":"02029D75-FAF2-4842-9246-079C7DE36417"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp2:*:*:*:*:*:*:*","matchCriteriaId":"E0146341-364C-4085-A2E1-BC8C260FBA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:vsx_ng_with_application_intelligence:*:*:*:*:*:*:*","matchCriteriaId":"B5EF01C8-1C8A-4BD1-A13B-CE31F09F9523"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:access_registrar:*:*:*:*:*:*:*:*","matchCriteriaId":"B8496E0D-2507-4C25-A122-0B846CBCA72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:*:*:*:*:*:*:*:*","matchCriteriaId":"8E383F2A-DFCF-47F8-94EE-3563D41EA597"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css_secure_content_accelerator:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D2D87EF0-056E-4128-89EB-2803ED83DEE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css_secure_content_accelerator:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB3163C1-2044-44DA-9C88-076D75FDF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css11000_content_services_switch:*:*:*:*:*:*:*:*","matchCriteriaId":"07E1B690-C58B-4C08-A757-F3DF451FDAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:okena_stormwatch:3.2:*:*:*:*:*:*:*","matchCriteriaId":"31F0E14C-7681-4D1A-B982-A51E450B93A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pix_firewall:6.2.2_.111:*:*:*:*:*:*:*","matchCriteriaId":"ECBC761F-A8F5-4CD8-B19C-5CE8FFC58FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:threat_response:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF39E8B-C201-4940-81C9-14AF4C3DD4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:6.10:*:*:*:*:*:*:*","matchCriteriaId":"AC604680-2E9E-4DC4-ACDD-74D552A45BA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:6.10_b4:*:*:*:*:*:*:*","matchCriteriaId":"37A94436-D092-4C7E-B87B-63BC621EE82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.1_0.1.02:*:*:*:*:*:*:*","matchCriteriaId":"862165CF-3CFB-4C6E-8238-86FA85F243C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.1_0.2.06:*:*:*:*:*:*:*","matchCriteriaId":"056F3336-BAA8-4A03-90B4-7B31710FC1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.2_0.0.03:*:*:*:*:*:*:*","matchCriteriaId":"9FDC2510-FBB9-429A-B6D4-10AB11F93960"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.10:*:*:*:*:*:*:*","matchCriteriaId":"5D45127E-A544-40A0-9D34-BD70D95C9772"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.10_.0.06s:*:*:*:*:*:*:*","matchCriteriaId":"56C69C3E-C895-45C8-8182-7BB412A0C828"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A1FDD507-C38B-4C38-A54F-3DA6F07AD0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6F2B7AC2-CF08-4AC9-9A71-3A8130F9F9AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4D9564B-B92E-4C97-87FF-B56D62DCA775"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.01.05.08:*:*:*:*:*:*:*","matchCriteriaId":"B931D4F8-23F5-4ABA-A457-959995D30C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.02.00.00:*:*:*:*:*:*:*","matchCriteriaId":"BE6A023E-9C2A-487F-B5CE-674C766BFE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.02.00.01:*:*:*:*:*:*:*","matchCriteriaId":"6A15ACA2-D500-4260-B51A-6FE6AB5A45A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2A045971-8756-47E8-9044-C39D08B36F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CAA95881-7231-4FDA-AF73-04DF9FF0B64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"62B7F6AD-EDBD-4B09-BDB2-795ED114F2AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F045AB7B-1551-46E5-A5CC-BF13C1BB49F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"44E85930-3AAD-420B-8E3E-AEC57344F6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"52FD4485-BCA2-485A-A0CF-F8152C9DBFA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7CF53BE4-FE2D-4D63-BD0F-A423D0FE3BE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2_rc1:*:*:*:*:*:*:*","matchCriteriaId":"00993464-BE09-4691-B3F0-51BBA9FB80C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2_rc2:*:*:*:*:*:*:*","matchCriteriaId":"896AB39E-2078-4BA2-9522-477BD5F98FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EB9279EC-47CF-45F1-B4CC-B2B332E82E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E7300C3E-8105-4C23-89B9-7D29CED18C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"90C59DB2-48DA-4172-A1F5-25CF3B5097AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"715F4E0B-7E4B-4520-A987-9B3ED3136B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9CA1F606-C558-40FD-9300-6E2796F47BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A037FAA6-6D26-4496-BC67-03475B4D1155"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D3831DD3-E783-4200-8986-FDBF7DD9BA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.2:*:*:*:*:*:*:*","matchCriteriaId":"2909C9D5-3D8F-4C41-B0E7-A0C0B432C19A"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.3:*:*:*:*:*:*:*","matchCriteriaId":"E09436DF-E3C1-4C03-A3BE-73C4BC84BB7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"699764B6-0F86-4AB0-86A3-4F2E69AD820C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.0:*:*:*:*:*:*:*","matchCriteriaId":"7562ADC4-0D01-4FC2-98F0-1F4041BDA52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5:*:*:*:*:*:*:*","matchCriteriaId":"E6FAB588-BDBE-4A04-AB9E-4F700A3951F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:*","matchCriteriaId":"E1B83F84-D1EF-43B4-8620-3C1BCCE44553"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:*","matchCriteriaId":"41169D2F-4F16-466A-82E9-AD0735472B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*","matchCriteriaId":"947699C3-D9DE-411A-99C0-44ADD1D2223A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*","matchCriteriaId":"15F668C0-8420-4401-AB0F-479575596CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CDDCC7B6-34CA-4551-9833-306B93E517BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6D69C160-39F7-48B8-B9A3-CC86690453C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:1.5:*:*:*:*:*:*:*","matchCriteriaId":"166BF638-ABDC-4BB9-BD4E-2B22681AD9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8FA6420B-9F6A-48F4-A445-12B60A320347"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6-15:*:i386:*:*:*:*:*","matchCriteriaId":"09F3FB7B-0F68-49F3-A3B7-977A687A42E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6b-3:*:i386:*:*:*:*:*","matchCriteriaId":"088F2FF7-96E5-455E-A35B-D99F9854EC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386:*:*:*:*:*","matchCriteriaId":"FFA721BF-1B2E-479F-BF25-02D441BF175B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386_dev:*:*:*:*:*","matchCriteriaId":"AFEDCE49-21CC-4168-818F-4C638EE3B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386_perl:*:*:*:*:*","matchCriteriaId":"B7D18F9B-C0BE-4DE8-81F4-5BF56C00BF41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:servercluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8F0F78F4-E81E-4C6B-AB73-D6AAE191060E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:servercluster:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DF1A5808-6D5D-48AD-9470-5A6510D17913"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:1_2.0:*:*:*:*:*:*:*","matchCriteriaId":"C1E8990D-D9A0-4A71-9D87-EC047E01B0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:1_3.0:*:*:*:*:*:*:*","matchCriteriaId":"6DBCC172-6867-4DFD-AAEF-9BDB4DA21F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C2F2BEEA-46BB-4718-B0F3-B4EC62B678A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8D09E11C-C5BB-409E-BB0D-7F351250419B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6B06A05D-AA31-441D-9FC2-3558648C3B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_securitycluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C0886901-6F93-44C1-B774-84D7E5D9554C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_securitycluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3F203A80-7C1E-4A04-8E99-63525E176753"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_webcluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CA0A204C-158B-4014-A53C-75E0CD63E0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_webcluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"085BA581-7DA5-4FA4-A888-351281FD0A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.5.17:*:*:*:*:*:*:*","matchCriteriaId":"EA1C4B3C-5701-4233-BA94-28915713F9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.5.18:*:*:*:*:*:*:*","matchCriteriaId":"28D9F8D7-698A-486A-918A-7DB5CAFBB3CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D125C2A0-A4B5-48D6-A38A-54755C3FDF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0F85F672-0F21-4AD7-8620-13D82F2ECC22"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.7:*:*:*:*:*:*:*","matchCriteriaId":"89070041-613A-4F7B-BD6A-C6091D21FC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D9A71933-4BD5-4B11-8B14-D997E75F29CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"5B6BE11D-FC02-4950-A554-08CC9D8B1853"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A53FD0E1-9BAA-43F0-BCC9-0BE8D4356F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B80ADAE8-94D4-46A4-A5ED-FF134D808B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"69FA0221-5073-4D45-950F-119497B53FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C4AE5B43-7C90-4C2A-A215-30F5EC5841C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2CC1A110-B203-4962-8E1A-74BD98121AF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B5A92C4D-B024-4D39-9479-409C39586F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E7E0C4F5-CF02-4FF6-AE9B-5B6B70D5C067"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5E8998CC-E372-46D0-8339-47DC8D92D253"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.2:*:*:*:*:*:*:*","matchCriteriaId":"AF131FDC-BF8D-4A17-99F0-444EB900E83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"880811B3-E78E-456E-972E-DE733F368576"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"22411F18-2B93-405A-A3B5-2CF0A04977C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:1.7:*:*:*:*:*:*:*","matchCriteriaId":"C71188B7-E6DC-41E5-B619-367341113501"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"07491444-0196-4504-A971-A5E388B86BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0:*:*:*:*:*:*:*","matchCriteriaId":"72BC6CD2-3291-4E69-8DC6-F3AB853F8931"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"CD43EDDF-58A7-4705-B8C7-FD76C35A437D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A7C2E603-568F-40F6-9A7C-439E2A51B37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"703421A7-E8C5-450B-97EF-FD9D99D4B834"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.20:*:*:*:*:*:*:*","matchCriteriaId":"9519BCB2-B401-44CE-97F6-847BB36AE45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.30:*:*:*:*:*:*:*","matchCriteriaId":"BBE573E8-DD94-4293-99AE-27B9067B3ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.40:*:*:*:*:*:*:*","matchCriteriaId":"D14413DA-5199-4282-9E22-D347E9D8E469"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"05CC5F49-0E9E-45D8-827D-A5940566DB25"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.0.1_build_2129:*:*:*:*:*:*:*","matchCriteriaId":"5D94EE19-6CE9-4E02-8174-D9954CDBF02B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E4BEE3-AE7B-4481-B724-2E644E18ACC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.5.1_build_5336:*:*:*:*:*:*:*","matchCriteriaId":"EAAB7052-E0B6-472E-920B-A0F0AEA25D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:3.0_build_7592:*:*:*:*:*:*:*","matchCriteriaId":"8CE38F15-BD42-4171-8670-86AA8169A60C"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"20C0BD87-CE4B-49D2-89BE-EF282C43AD72"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C3E6C4A8-59F4-43EE-8413-E95289037598"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FE76357A-27E6-4D85-9AA0-1BB658C41568"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C56C5FDB-24E2-479D-87CA-164CD28567D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AEF6C16F-8EDF-4A24-BFEF-6A304D654EEB"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D982AE39-BB57-49E7-B5FE-5EF1ADE2F019"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg:*:*:*:*:*:*:*:*","matchCriteriaId":"1B6CFEC9-0F8F-4CD4-ABD1-E6533F910F7F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"12DE5E22-DF93-46BE-85A3-D4E04379E901"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11500:*:*:*:*:*:*:*:*","matchCriteriaId":"BF28C435-C036-4507-8E3F-44E722F9974A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4480_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"CDA957E2-ABF9-49B2-874F-3FC3060CE0B0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4490_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"5F2CDFE7-6853-4A31-85C0-50C57A8D606A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:mds_9000:*:*:*:*:*:*:*:*","matchCriteriaId":"0F2ED90B-DDBA-49DE-AC78-20E7D77C8858"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:secure_content_accelerator:10000:*:*:*:*:*:*:*","matchCriteriaId":"408A9DB0-81EF-4186-B338-44954E67289B"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0C5F92-7E93-4C3F-B22B-E6612A4D3E10"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.01:*:*:*:*:*:*:*","matchCriteriaId":"2D0DC4B4-9AD9-4AC8-BFA7-A3D209B5D089"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.02:*:*:*:*:*:*:*","matchCriteriaId":"303362A5-9C3C-4C85-8C97-2AB12CE01BF6"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.03:*:*:*:*:*:*:*","matchCriteriaId":"FED22DC1-E06B-4511-B920-6DAB792262D8"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.04:*:*:*:*:*:*:*","matchCriteriaId":"4CE44CA7-4BC7-4C2B-948F-2ACABB91528B"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F757B2A7-869F-4702-81EB-466317A79D61"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.1.02:*:*:*:*:*:*:*","matchCriteriaId":"01F6E9A9-6C85-48DA-BC61-55F8EACCB59F"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:crypto_accelerator_4000:1.0:*:*:*:*:*:*:*","matchCriteriaId":"64AF1E33-4086-43E2-8F54-DA75A99D4B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos_ca_sa:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"53D16F03-A4C7-4497-AB74-499F208FF059"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos_ca_sa:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"13A33EC1-836B-4C8C-AC18-B5BD4F90E612"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*","matchCriteriaId":"58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C558CED8-8342-46CB-9F52-580B626D320E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0F85D19E-6C26-429D-B876-F34238B9DAAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FEC7CCF7-CBC6-4EDC-8EDD-884DFFFBCC7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"E5011A33-CD6D-4EFC-ACFD-E51C9AE726A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4.101\\):*:*:*:*:*:*:*","matchCriteriaId":"09063867-0E64-4630-B35B-4CCA348E4DAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*","matchCriteriaId":"78F98CD7-A352-483C-9968-8FB2627A7CBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F97FE485-705F-4707-B6C6-0EF9E8A85D5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E2B925E8-D2C2-4E8C-AC21-0C422245C482"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"B9170562-872E-4C32-869C-B10FF35A925E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"D0927A68-8BB2-4F03-8396-E9CACC158FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"559DDBA3-2AF4-4A0C-B219-6779BA931F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*","matchCriteriaId":"ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5226C9CC-6933-4F10-B426-B47782C606FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"757DAE9A-B25D-4B8A-A41B-66C2897B537E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"5E3DC170-E279-4725-B9EE-6840B5685CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3.100\\):*:*:*:*:*:*:*","matchCriteriaId":"8091EDA9-BD18-47F7-8CEC-E086238647C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6F867890-74A4-4892-B99A-27DB4603B873"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"CE05B514-F094-4632-B25B-973F976F6409"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"3392428D-1A85-4472-A276-C482A78E2CE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.102\\):*:*:*:*:*:*:*","matchCriteriaId":"40954985-16E6-4F37-B014-6A55166AE093"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.109\\):*:*:*:*:*:*:*","matchCriteriaId":"0C097809-1FEF-4417-A201-42291CC29122"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:05.openssl.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://fedoranews.org/updates/FEDORA-2004-095.shtml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00045.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=107953412903636&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=108403806509920&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11139","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17381","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17398","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17401","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18247","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200403-03.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-239.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/o-101.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-465","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/288574","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:023","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_07_openssl.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openssl.org/news/secadv_20040317.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-120.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-121.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-139.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-829.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-830.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9899","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.trustix.org/errata/2004/0012","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.uniras.gov.uk/vuls/2004/224012/index.htm","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-078A.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15505","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2621","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5770","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A870","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A975","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9779","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:05.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://fedoranews.org/updates/FEDORA-2004-095.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=107953412903636&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=108403806509920&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200403-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-239.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/o-101.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/288574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_07_openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openssl.org/news/secadv_20040317.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-120.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-121.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-139.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-829.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-830.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.trustix.org/errata/2004/0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.uniras.gov.uk/vuls/2004/224012/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-078A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2004-0081","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2026-06-16T22:04:53.963","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool."},{"lang":"es","value":"OpenSSL 0.9.6 anteriores a la 0.9.6d no manejan adecuadamente los tipos de mensajes desconocidos, lo que permite a atacantes remotos causar una denegación de servicios (por bucle infinito), como se demuestra utilizando la herramienta de testeo Codenomicon TLS."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:*:*:*:*:*:*:*:*","matchCriteriaId":"2A9CB22A-21E0-46F6-B6CD-BB38A80FA7A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B9CAFC15-178C-4176-9668-D4A04B63E77B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3C8D6949-89F4-40EF-98F4-8D15628DC345"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1_\\(3.005\\):*:*:*:*:*:*:*","matchCriteriaId":"F3DB2AEE-FB5C-42B7-845B-EDA3E58D5D68"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:2.1_\\(0.208\\):*:*:*:*:*:*:*","matchCriteriaId":"6479D85C-1A12-486D-818C-6679F415CA26"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:aaa_server:*:*:*:*:*:*:*:*","matchCriteriaId":"287CF5FA-D0EC-4FD7-9718-973587EF34DF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:apache-based_web_server:2.0.43.00:*:*:*:*:*:*:*","matchCriteriaId":"C88168D4-7DB5-4720-8640-400BB680D0FD"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:apache-based_web_server:2.0.43.04:*:*:*:*:*:*:*","matchCriteriaId":"968915A1-375B-4C69-BE11-9A393F7F1B0F"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:clientless_vpn_gateway_4400:5.0:*:*:*:*:*:*:*","matchCriteriaId":"11465DCA-72E5-40E9-9D8E-B3CD470C47E9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3954D0D1-9FDF-47D0-9710-D0FB06955B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:2.2:*:*:*:*:*:*:*","matchCriteriaId":"3D6712BD-DE8F-40F5-AC74-B9EFE9A50CFA"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E586558A-ABC3-42EB-8B4D-DC92A0D695E6"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg200:4.4:*:*:*:*:*:*:*","matchCriteriaId":"2A4C5F60-B32D-4D85-BA28-AE11972ED614"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg200:4.31.29:*:*:*:*:*:*:*","matchCriteriaId":"6A5935C3-3D83-461F-BC26-E03362115C42"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg203:4.4:*:*:*:*:*:*:*","matchCriteriaId":"80AC523B-3106-46F2-B760-803DCF8061F4"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg203:4.31.29:*:*:*:*:*:*:*","matchCriteriaId":"F8B8D6F3-D15D-489F-A807-17E63F4831F2"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg208:*:*:*:*:*:*:*:*","matchCriteriaId":"808189BA-197F-49CE-933E-A728F395749C"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg208:4.4:*:*:*:*:*:*:*","matchCriteriaId":"32DCFA7B-7BBB-465A-A4AD-7E18EE3C02DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.2:*:*:*:*:*:*:*","matchCriteriaId":"CC7EF0CD-EA39-457B-8E2E-9120B65A5835"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7BC2983F-5212-464B-AC21-8A897DEC1F58"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.4:*:*:*:*:*:*:*","matchCriteriaId":"EBF17989-D1F2-4B04-80BD-CFABDD482ABA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*","matchCriteriaId":"2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*","matchCriteriaId":"9A5309ED-D84F-4F52-9864-5B0FEEEE5022"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.05:*:*:*:*:*:*:*","matchCriteriaId":"31B1ADC1-9B6D-4B5E-A05A-D69599A3A0D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"038FEDE7-986F-4CA5-9003-BA68352B87D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D9D76A8D-832B-411E-A458-186733C66010"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11\\)e:*:*:*:*:*:*:*","matchCriteriaId":"580BA1FE-0826-47A7-8BD3-9225E0841EDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e:*:*:*:*:*:*:*","matchCriteriaId":"040B04CD-B891-4F19-A7CC-5C2D462FBD6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e12:*:*:*:*:*:*:*","matchCriteriaId":"5BF29685-7FFC-4093-A1D4-21E4871AF5C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e14:*:*:*:*:*:*:*","matchCriteriaId":"E72872C9-63AF-417F-BFAE-92B4D350C006"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)e9:*:*:*:*:*:*:*","matchCriteriaId":"80BCF196-5E5A-4F31-BCE7-AA0C748CA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"970939C5-1E6F-47B6-97E6-7B2C1E019985"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy:*:*:*:*:*:*:*","matchCriteriaId":"CD1F4148-E772-4708-8C1F-D67F969C11DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy1:*:*:*:*:*:*:*","matchCriteriaId":"3CEBCEF0-5982-4B30-8377-9CAC978A1CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F8B87C95-4B34-4628-AD03-67D1DE13E097"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2:*:*:*:*:*:*:*","matchCriteriaId":"758F95DB-E619-4B08-86FA-6CF2C1B0CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4F04471C-732F-44EE-AD1B-6305C1DD7DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3499913B-5DCD-4115-8C7B-9E8AFF79DE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E237919A-416B-4039-AAD2-7FAE1F4E100D"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"39149924-188C-40C1-B598-A9CD407C90DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3:*:*:*:*:*:*:*","matchCriteriaId":"15D5780C-4E29-4BCA-A47E-29FF6EAF33FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E6501108-5455-48FE-AA82-37AFA5D7EC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:*:*:lx:*:*:*:*:*","matchCriteriaId":"C1A3B951-A1F8-4291-82FA-AB7922D13ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:5.1.46:*:*:*:*:*:*:*","matchCriteriaId":"3F2E7C81-C0F5-4D36-9A23-03BE69295ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:s3210:*:*:*:*:*:*:*","matchCriteriaId":"9D0EF4A3-2FE5-41E4-A764-30B379ECF081"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:s3400:*:*:*:*:*:*:*","matchCriteriaId":"CCF6D59E-8AEA-4380-B86B-0803B2202F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5:*:*:*:*:*:*:*","matchCriteriaId":"140ABF28-FA39-4D77-AEB2-304962ED48C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5x:*:*:*:*:*:*:*","matchCriteriaId":"09473DD9-5114-44C5-B56C-6630FBEBCACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:100_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A7ECD3A4-5A39-4222-8350-524F11D8FFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:500:*:*:*:*:*:*:*","matchCriteriaId":"D36C140D-E80C-479A-ADA7-18E901549059"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:2000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"940712E9-B041-4B7F-BD02-7DD0AE596D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"03B887A2-9025-4C5B-8901-71BC63BF5293"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:7500_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"33264586-7160-4550-9FF9-4101D72F5C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:10000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE5E6521-0611-4473-82AC-21655F10FEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:*:*:vsx-ng-ai:*:*:*:*:*","matchCriteriaId":"AA9A50A1-CA8C-4EE5-B68F-4958F6B4B028"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:2.0:*:gx:*:*:*:*:*","matchCriteriaId":"8C83ABA2-87CD-429B-9800-590F8256B064"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp0:*:*:*:*:*:*:*","matchCriteriaId":"A4D9A576-2878-4AC4-AC95-E69CB8A84A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp1:*:*:*:*:*:*:*","matchCriteriaId":"0A1A0B02-CF33-401F-9AB2-D595E586C795"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp2:*:*:*:*:*:*:*","matchCriteriaId":"8C0EF3F0-B82E-45B7-8D05-05E76009F7A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"90FB3825-21A6-4DBE-8188-67672DBE01CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"80623E58-8B46-4559-89A4-C329AACF3CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"AEE6C228-CD93-4636-868B-C19BC1674BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"A645148C-AD0D-46C1-BEE3-10F5C9066279"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"0D69187C-7F46-4FF0-A8A0-0E1989EA79BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation:*:*:*:*:*:*:*","matchCriteriaId":"C48F4DF4-8091-45D0-9F80-F760500B1202"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp0:*:*:*:*:*:*:*","matchCriteriaId":"4AE4A7EE-1BA3-46F1-BF4A-A72997EE0992"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp1:*:*:*:*:*:*:*","matchCriteriaId":"02029D75-FAF2-4842-9246-079C7DE36417"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:vsx_ng_with_application_intelligence:*:*:*:*:*:*:*","matchCriteriaId":"B5EF01C8-1C8A-4BD1-A13B-CE31F09F9523"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:access_registrar:*:*:*:*:*:*:*:*","matchCriteriaId":"B8496E0D-2507-4C25-A122-0B846CBCA72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:*:*:*:*:*:*:*:*","matchCriteriaId":"8E383F2A-DFCF-47F8-94EE-3563D41EA597"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css_secure_content_accelerator:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D2D87EF0-056E-4128-89EB-2803ED83DEE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css_secure_content_accelerator:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB3163C1-2044-44DA-9C88-076D75FDF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css11000_content_services_switch:*:*:*:*:*:*:*:*","matchCriteriaId":"07E1B690-C58B-4C08-A757-F3DF451FDAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:okena_stormwatch:3.2:*:*:*:*:*:*:*","matchCriteriaId":"31F0E14C-7681-4D1A-B982-A51E450B93A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pix_firewall:6.2.2_.111:*:*:*:*:*:*:*","matchCriteriaId":"ECBC761F-A8F5-4CD8-B19C-5CE8FFC58FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:threat_response:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF39E8B-C201-4940-81C9-14AF4C3DD4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:6.10:*:*:*:*:*:*:*","matchCriteriaId":"AC604680-2E9E-4DC4-ACDD-74D552A45BA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:6.10_b4:*:*:*:*:*:*:*","matchCriteriaId":"37A94436-D092-4C7E-B87B-63BC621EE82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.1_0.1.02:*:*:*:*:*:*:*","matchCriteriaId":"862165CF-3CFB-4C6E-8238-86FA85F243C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.1_0.2.06:*:*:*:*:*:*:*","matchCriteriaId":"056F3336-BAA8-4A03-90B4-7B31710FC1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.2_0.0.03:*:*:*:*:*:*:*","matchCriteriaId":"9FDC2510-FBB9-429A-B6D4-10AB11F93960"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.10:*:*:*:*:*:*:*","matchCriteriaId":"5D45127E-A544-40A0-9D34-BD70D95C9772"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.10_.0.06s:*:*:*:*:*:*:*","matchCriteriaId":"56C69C3E-C895-45C8-8182-7BB412A0C828"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A1FDD507-C38B-4C38-A54F-3DA6F07AD0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6F2B7AC2-CF08-4AC9-9A71-3A8130F9F9AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4D9564B-B92E-4C97-87FF-B56D62DCA775"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.01.05.08:*:*:*:*:*:*:*","matchCriteriaId":"B931D4F8-23F5-4ABA-A457-959995D30C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.02.00.00:*:*:*:*:*:*:*","matchCriteriaId":"BE6A023E-9C2A-487F-B5CE-674C766BFE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.02.00.01:*:*:*:*:*:*:*","matchCriteriaId":"6A15ACA2-D500-4260-B51A-6FE6AB5A45A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2A045971-8756-47E8-9044-C39D08B36F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CAA95881-7231-4FDA-AF73-04DF9FF0B64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"62B7F6AD-EDBD-4B09-BDB2-795ED114F2AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F045AB7B-1551-46E5-A5CC-BF13C1BB49F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"44E85930-3AAD-420B-8E3E-AEC57344F6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"52FD4485-BCA2-485A-A0CF-F8152C9DBFA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7CF53BE4-FE2D-4D63-BD0F-A423D0FE3BE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2_rc1:*:*:*:*:*:*:*","matchCriteriaId":"00993464-BE09-4691-B3F0-51BBA9FB80C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2_rc2:*:*:*:*:*:*:*","matchCriteriaId":"896AB39E-2078-4BA2-9522-477BD5F98FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EB9279EC-47CF-45F1-B4CC-B2B332E82E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E7300C3E-8105-4C23-89B9-7D29CED18C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"90C59DB2-48DA-4172-A1F5-25CF3B5097AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"715F4E0B-7E4B-4520-A987-9B3ED3136B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9CA1F606-C558-40FD-9300-6E2796F47BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A037FAA6-6D26-4496-BC67-03475B4D1155"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D3831DD3-E783-4200-8986-FDBF7DD9BA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.2:*:*:*:*:*:*:*","matchCriteriaId":"2909C9D5-3D8F-4C41-B0E7-A0C0B432C19A"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.3:*:*:*:*:*:*:*","matchCriteriaId":"E09436DF-E3C1-4C03-A3BE-73C4BC84BB7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"699764B6-0F86-4AB0-86A3-4F2E69AD820C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.0:*:*:*:*:*:*:*","matchCriteriaId":"7562ADC4-0D01-4FC2-98F0-1F4041BDA52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5:*:*:*:*:*:*:*","matchCriteriaId":"E6FAB588-BDBE-4A04-AB9E-4F700A3951F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:*","matchCriteriaId":"E1B83F84-D1EF-43B4-8620-3C1BCCE44553"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:*","matchCriteriaId":"41169D2F-4F16-466A-82E9-AD0735472B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*","matchCriteriaId":"947699C3-D9DE-411A-99C0-44ADD1D2223A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*","matchCriteriaId":"15F668C0-8420-4401-AB0F-479575596CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CDDCC7B6-34CA-4551-9833-306B93E517BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6D69C160-39F7-48B8-B9A3-CC86690453C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:1.5:*:*:*:*:*:*:*","matchCriteriaId":"166BF638-ABDC-4BB9-BD4E-2B22681AD9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8FA6420B-9F6A-48F4-A445-12B60A320347"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6-15:*:i386:*:*:*:*:*","matchCriteriaId":"09F3FB7B-0F68-49F3-A3B7-977A687A42E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6b-3:*:i386:*:*:*:*:*","matchCriteriaId":"088F2FF7-96E5-455E-A35B-D99F9854EC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386:*:*:*:*:*","matchCriteriaId":"FFA721BF-1B2E-479F-BF25-02D441BF175B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386_dev:*:*:*:*:*","matchCriteriaId":"AFEDCE49-21CC-4168-818F-4C638EE3B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386_perl:*:*:*:*:*","matchCriteriaId":"B7D18F9B-C0BE-4DE8-81F4-5BF56C00BF41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:servercluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8F0F78F4-E81E-4C6B-AB73-D6AAE191060E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:servercluster:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DF1A5808-6D5D-48AD-9470-5A6510D17913"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:1_2.0:*:*:*:*:*:*:*","matchCriteriaId":"C1E8990D-D9A0-4A71-9D87-EC047E01B0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:1_3.0:*:*:*:*:*:*:*","matchCriteriaId":"6DBCC172-6867-4DFD-AAEF-9BDB4DA21F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C2F2BEEA-46BB-4718-B0F3-B4EC62B678A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8D09E11C-C5BB-409E-BB0D-7F351250419B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6B06A05D-AA31-441D-9FC2-3558648C3B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_securitycluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C0886901-6F93-44C1-B774-84D7E5D9554C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_securitycluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3F203A80-7C1E-4A04-8E99-63525E176753"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_webcluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CA0A204C-158B-4014-A53C-75E0CD63E0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_webcluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"085BA581-7DA5-4FA4-A888-351281FD0A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.5.17:*:*:*:*:*:*:*","matchCriteriaId":"EA1C4B3C-5701-4233-BA94-28915713F9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.5.18:*:*:*:*:*:*:*","matchCriteriaId":"28D9F8D7-698A-486A-918A-7DB5CAFBB3CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D125C2A0-A4B5-48D6-A38A-54755C3FDF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0F85F672-0F21-4AD7-8620-13D82F2ECC22"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.7:*:*:*:*:*:*:*","matchCriteriaId":"89070041-613A-4F7B-BD6A-C6091D21FC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D9A71933-4BD5-4B11-8B14-D997E75F29CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"5B6BE11D-FC02-4950-A554-08CC9D8B1853"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A53FD0E1-9BAA-43F0-BCC9-0BE8D4356F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B80ADAE8-94D4-46A4-A5ED-FF134D808B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"69FA0221-5073-4D45-950F-119497B53FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C4AE5B43-7C90-4C2A-A215-30F5EC5841C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2CC1A110-B203-4962-8E1A-74BD98121AF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B5A92C4D-B024-4D39-9479-409C39586F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E7E0C4F5-CF02-4FF6-AE9B-5B6B70D5C067"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5E8998CC-E372-46D0-8339-47DC8D92D253"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.2:*:*:*:*:*:*:*","matchCriteriaId":"AF131FDC-BF8D-4A17-99F0-444EB900E83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"880811B3-E78E-456E-972E-DE733F368576"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"22411F18-2B93-405A-A3B5-2CF0A04977C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:1.7:*:*:*:*:*:*:*","matchCriteriaId":"C71188B7-E6DC-41E5-B619-367341113501"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"07491444-0196-4504-A971-A5E388B86BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0:*:*:*:*:*:*:*","matchCriteriaId":"72BC6CD2-3291-4E69-8DC6-F3AB853F8931"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"CD43EDDF-58A7-4705-B8C7-FD76C35A437D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A7C2E603-568F-40F6-9A7C-439E2A51B37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"703421A7-E8C5-450B-97EF-FD9D99D4B834"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.20:*:*:*:*:*:*:*","matchCriteriaId":"9519BCB2-B401-44CE-97F6-847BB36AE45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.30:*:*:*:*:*:*:*","matchCriteriaId":"BBE573E8-DD94-4293-99AE-27B9067B3ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.40:*:*:*:*:*:*:*","matchCriteriaId":"D14413DA-5199-4282-9E22-D347E9D8E469"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"05CC5F49-0E9E-45D8-827D-A5940566DB25"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.0.1_build_2129:*:*:*:*:*:*:*","matchCriteriaId":"5D94EE19-6CE9-4E02-8174-D9954CDBF02B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E4BEE3-AE7B-4481-B724-2E644E18ACC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.5.1_build_5336:*:*:*:*:*:*:*","matchCriteriaId":"EAAB7052-E0B6-472E-920B-A0F0AEA25D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:3.0_build_7592:*:*:*:*:*:*:*","matchCriteriaId":"8CE38F15-BD42-4171-8670-86AA8169A60C"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"20C0BD87-CE4B-49D2-89BE-EF282C43AD72"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C3E6C4A8-59F4-43EE-8413-E95289037598"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FE76357A-27E6-4D85-9AA0-1BB658C41568"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C56C5FDB-24E2-479D-87CA-164CD28567D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AEF6C16F-8EDF-4A24-BFEF-6A304D654EEB"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D982AE39-BB57-49E7-B5FE-5EF1ADE2F019"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg:*:*:*:*:*:*:*:*","matchCriteriaId":"1B6CFEC9-0F8F-4CD4-ABD1-E6533F910F7F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"12DE5E22-DF93-46BE-85A3-D4E04379E901"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11500:*:*:*:*:*:*:*:*","matchCriteriaId":"BF28C435-C036-4507-8E3F-44E722F9974A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4480_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"CDA957E2-ABF9-49B2-874F-3FC3060CE0B0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4490_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"5F2CDFE7-6853-4A31-85C0-50C57A8D606A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:mds_9000:*:*:*:*:*:*:*:*","matchCriteriaId":"0F2ED90B-DDBA-49DE-AC78-20E7D77C8858"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:secure_content_accelerator:10000:*:*:*:*:*:*:*","matchCriteriaId":"408A9DB0-81EF-4186-B338-44954E67289B"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0C5F92-7E93-4C3F-B22B-E6612A4D3E10"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.01:*:*:*:*:*:*:*","matchCriteriaId":"2D0DC4B4-9AD9-4AC8-BFA7-A3D209B5D089"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.02:*:*:*:*:*:*:*","matchCriteriaId":"303362A5-9C3C-4C85-8C97-2AB12CE01BF6"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.03:*:*:*:*:*:*:*","matchCriteriaId":"FED22DC1-E06B-4511-B920-6DAB792262D8"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.04:*:*:*:*:*:*:*","matchCriteriaId":"4CE44CA7-4BC7-4C2B-948F-2ACABB91528B"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F757B2A7-869F-4702-81EB-466317A79D61"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.1.02:*:*:*:*:*:*:*","matchCriteriaId":"01F6E9A9-6C85-48DA-BC61-55F8EACCB59F"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:crypto_accelerator_4000:1.0:*:*:*:*:*:*:*","matchCriteriaId":"64AF1E33-4086-43E2-8F54-DA75A99D4B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos_ca_sa:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"53D16F03-A4C7-4497-AB74-499F208FF059"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos_ca_sa:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"13A33EC1-836B-4C8C-AC18-B5BD4F90E612"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*","matchCriteriaId":"58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C558CED8-8342-46CB-9F52-580B626D320E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0F85D19E-6C26-429D-B876-F34238B9DAAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FEC7CCF7-CBC6-4EDC-8EDD-884DFFFBCC7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"E5011A33-CD6D-4EFC-ACFD-E51C9AE726A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4.101\\):*:*:*:*:*:*:*","matchCriteriaId":"09063867-0E64-4630-B35B-4CCA348E4DAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*","matchCriteriaId":"78F98CD7-A352-483C-9968-8FB2627A7CBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F97FE485-705F-4707-B6C6-0EF9E8A85D5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E2B925E8-D2C2-4E8C-AC21-0C422245C482"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"B9170562-872E-4C32-869C-B10FF35A925E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"D0927A68-8BB2-4F03-8396-E9CACC158FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"559DDBA3-2AF4-4A0C-B219-6779BA931F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*","matchCriteriaId":"ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5226C9CC-6933-4F10-B426-B47782C606FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"757DAE9A-B25D-4B8A-A41B-66C2897B537E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"5E3DC170-E279-4725-B9EE-6840B5685CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3.100\\):*:*:*:*:*:*:*","matchCriteriaId":"8091EDA9-BD18-47F7-8CEC-E086238647C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6F867890-74A4-4892-B99A-27DB4603B873"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"CE05B514-F094-4632-B25B-973F976F6409"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"3392428D-1A85-4472-A276-C482A78E2CE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.102\\):*:*:*:*:*:*:*","matchCriteriaId":"40954985-16E6-4F37-B014-6A55166AE093"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.109\\):*:*:*:*:*:*:*","matchCriteriaId":"0C097809-1FEF-4417-A201-42291CC29122"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834","source":"cve@mitre.org"},{"url":"http://fedoranews.org/updates/FEDORA-2004-095.shtml","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107955049331965&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108403850228012&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-119.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11139","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200403-03.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-465","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/465542","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-120.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-121.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-139.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9899","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0012","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/224012/index.htm","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-078A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15509","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11755","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A871","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A902","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://fedoranews.org/updates/FEDORA-2004-095.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107955049331965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108403850228012&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-119.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200403-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/465542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-120.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-121.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-139.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/224012/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-078A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0112","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2026-06-16T22:04:57.617","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read."},{"lang":"es","value":"El código que une SSL/TLS en OpenSSL 0.9.7a, 0.9.7b y 0.9.7c, usando Kerberos, no comprueba adecuadamente la longitud de los tickets de Kerberos, lo que permite que atacantes remotos provoquen una denegación de servicio."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:*:*:*:*:*:*:*:*","matchCriteriaId":"2A9CB22A-21E0-46F6-B6CD-BB38A80FA7A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B9CAFC15-178C-4176-9668-D4A04B63E77B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3C8D6949-89F4-40EF-98F4-8D15628DC345"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1_\\(3.005\\):*:*:*:*:*:*:*","matchCriteriaId":"F3DB2AEE-FB5C-42B7-845B-EDA3E58D5D68"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:2.1_\\(0.208\\):*:*:*:*:*:*:*","matchCriteriaId":"6479D85C-1A12-486D-818C-6679F415CA26"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:aaa_server:*:*:*:*:*:*:*:*","matchCriteriaId":"287CF5FA-D0EC-4FD7-9718-973587EF34DF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:apache-based_web_server:2.0.43.00:*:*:*:*:*:*:*","matchCriteriaId":"C88168D4-7DB5-4720-8640-400BB680D0FD"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:apache-based_web_server:2.0.43.04:*:*:*:*:*:*:*","matchCriteriaId":"968915A1-375B-4C69-BE11-9A393F7F1B0F"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:clientless_vpn_gateway_4400:5.0:*:*:*:*:*:*:*","matchCriteriaId":"11465DCA-72E5-40E9-9D8E-B3CD470C47E9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3954D0D1-9FDF-47D0-9710-D0FB06955B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:2.2:*:*:*:*:*:*:*","matchCriteriaId":"3D6712BD-DE8F-40F5-AC74-B9EFE9A50CFA"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E586558A-ABC3-42EB-8B4D-DC92A0D695E6"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg200:4.4:*:*:*:*:*:*:*","matchCriteriaId":"2A4C5F60-B32D-4D85-BA28-AE11972ED614"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg200:4.31.29:*:*:*:*:*:*:*","matchCriteriaId":"6A5935C3-3D83-461F-BC26-E03362115C42"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg203:4.4:*:*:*:*:*:*:*","matchCriteriaId":"80AC523B-3106-46F2-B760-803DCF8061F4"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg203:4.31.29:*:*:*:*:*:*:*","matchCriteriaId":"F8B8D6F3-D15D-489F-A807-17E63F4831F2"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg208:*:*:*:*:*:*:*:*","matchCriteriaId":"808189BA-197F-49CE-933E-A728F395749C"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg208:4.4:*:*:*:*:*:*:*","matchCriteriaId":"32DCFA7B-7BBB-465A-A4AD-7E18EE3C02DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.2:*:*:*:*:*:*:*","matchCriteriaId":"CC7EF0CD-EA39-457B-8E2E-9120B65A5835"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7BC2983F-5212-464B-AC21-8A897DEC1F58"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.4:*:*:*:*:*:*:*","matchCriteriaId":"EBF17989-D1F2-4B04-80BD-CFABDD482ABA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*","matchCriteriaId":"2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*","matchCriteriaId":"9A5309ED-D84F-4F52-9864-5B0FEEEE5022"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.05:*:*:*:*:*:*:*","matchCriteriaId":"31B1ADC1-9B6D-4B5E-A05A-D69599A3A0D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"038FEDE7-986F-4CA5-9003-BA68352B87D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D9D76A8D-832B-411E-A458-186733C66010"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11\\)e:*:*:*:*:*:*:*","matchCriteriaId":"580BA1FE-0826-47A7-8BD3-9225E0841EDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e:*:*:*:*:*:*:*","matchCriteriaId":"040B04CD-B891-4F19-A7CC-5C2D462FBD6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e12:*:*:*:*:*:*:*","matchCriteriaId":"5BF29685-7FFC-4093-A1D4-21E4871AF5C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e14:*:*:*:*:*:*:*","matchCriteriaId":"E72872C9-63AF-417F-BFAE-92B4D350C006"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)e9:*:*:*:*:*:*:*","matchCriteriaId":"80BCF196-5E5A-4F31-BCE7-AA0C748CA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"970939C5-1E6F-47B6-97E6-7B2C1E019985"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy:*:*:*:*:*:*:*","matchCriteriaId":"CD1F4148-E772-4708-8C1F-D67F969C11DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy1:*:*:*:*:*:*:*","matchCriteriaId":"3CEBCEF0-5982-4B30-8377-9CAC978A1CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F8B87C95-4B34-4628-AD03-67D1DE13E097"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2:*:*:*:*:*:*:*","matchCriteriaId":"758F95DB-E619-4B08-86FA-6CF2C1B0CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4F04471C-732F-44EE-AD1B-6305C1DD7DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3499913B-5DCD-4115-8C7B-9E8AFF79DE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E237919A-416B-4039-AAD2-7FAE1F4E100D"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"39149924-188C-40C1-B598-A9CD407C90DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3:*:*:*:*:*:*:*","matchCriteriaId":"15D5780C-4E29-4BCA-A47E-29FF6EAF33FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E6501108-5455-48FE-AA82-37AFA5D7EC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:*:*:lx:*:*:*:*:*","matchCriteriaId":"C1A3B951-A1F8-4291-82FA-AB7922D13ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:5.1.46:*:*:*:*:*:*:*","matchCriteriaId":"3F2E7C81-C0F5-4D36-9A23-03BE69295ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:s3210:*:*:*:*:*:*:*","matchCriteriaId":"9D0EF4A3-2FE5-41E4-A764-30B379ECF081"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:s3400:*:*:*:*:*:*:*","matchCriteriaId":"CCF6D59E-8AEA-4380-B86B-0803B2202F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5:*:*:*:*:*:*:*","matchCriteriaId":"140ABF28-FA39-4D77-AEB2-304962ED48C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5x:*:*:*:*:*:*:*","matchCriteriaId":"09473DD9-5114-44C5-B56C-6630FBEBCACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:100_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A7ECD3A4-5A39-4222-8350-524F11D8FFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:500:*:*:*:*:*:*:*","matchCriteriaId":"D36C140D-E80C-479A-ADA7-18E901549059"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:2000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"940712E9-B041-4B7F-BD02-7DD0AE596D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"03B887A2-9025-4C5B-8901-71BC63BF5293"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:7500_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"33264586-7160-4550-9FF9-4101D72F5C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:10000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE5E6521-0611-4473-82AC-21655F10FEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:*:*:vsx-ng-ai:*:*:*:*:*","matchCriteriaId":"AA9A50A1-CA8C-4EE5-B68F-4958F6B4B028"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:2.0:*:gx:*:*:*:*:*","matchCriteriaId":"8C83ABA2-87CD-429B-9800-590F8256B064"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp0:*:*:*:*:*:*:*","matchCriteriaId":"A4D9A576-2878-4AC4-AC95-E69CB8A84A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp1:*:*:*:*:*:*:*","matchCriteriaId":"0A1A0B02-CF33-401F-9AB2-D595E586C795"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp2:*:*:*:*:*:*:*","matchCriteriaId":"8C0EF3F0-B82E-45B7-8D05-05E76009F7A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"90FB3825-21A6-4DBE-8188-67672DBE01CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"80623E58-8B46-4559-89A4-C329AACF3CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"AEE6C228-CD93-4636-868B-C19BC1674BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"A645148C-AD0D-46C1-BEE3-10F5C9066279"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"0D69187C-7F46-4FF0-A8A0-0E1989EA79BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp0:*:*:*:*:*:*:*","matchCriteriaId":"4AE4A7EE-1BA3-46F1-BF4A-A72997EE0992"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp1:*:*:*:*:*:*:*","matchCriteriaId":"02029D75-FAF2-4842-9246-079C7DE36417"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp2:*:*:*:*:*:*:*","matchCriteriaId":"E0146341-364C-4085-A2E1-BC8C260FBA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:vsx_ng_with_application_intelligence:*:*:*:*:*:*:*","matchCriteriaId":"B5EF01C8-1C8A-4BD1-A13B-CE31F09F9523"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:access_registrar:*:*:*:*:*:*:*:*","matchCriteriaId":"B8496E0D-2507-4C25-A122-0B846CBCA72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:*:*:*:*:*:*:*:*","matchCriteriaId":"8E383F2A-DFCF-47F8-94EE-3563D41EA597"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css_secure_content_accelerator:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D2D87EF0-056E-4128-89EB-2803ED83DEE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css_secure_content_accelerator:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB3163C1-2044-44DA-9C88-076D75FDF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css11000_content_services_switch:*:*:*:*:*:*:*:*","matchCriteriaId":"07E1B690-C58B-4C08-A757-F3DF451FDAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:okena_stormwatch:3.2:*:*:*:*:*:*:*","matchCriteriaId":"31F0E14C-7681-4D1A-B982-A51E450B93A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pix_firewall:6.2.2_.111:*:*:*:*:*:*:*","matchCriteriaId":"ECBC761F-A8F5-4CD8-B19C-5CE8FFC58FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:threat_response:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF39E8B-C201-4940-81C9-14AF4C3DD4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:6.10:*:*:*:*:*:*:*","matchCriteriaId":"AC604680-2E9E-4DC4-ACDD-74D552A45BA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:6.10_b4:*:*:*:*:*:*:*","matchCriteriaId":"37A94436-D092-4C7E-B87B-63BC621EE82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.1_0.1.02:*:*:*:*:*:*:*","matchCriteriaId":"862165CF-3CFB-4C6E-8238-86FA85F243C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.1_0.2.06:*:*:*:*:*:*:*","matchCriteriaId":"056F3336-BAA8-4A03-90B4-7B31710FC1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.2_0.0.03:*:*:*:*:*:*:*","matchCriteriaId":"9FDC2510-FBB9-429A-B6D4-10AB11F93960"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.10:*:*:*:*:*:*:*","matchCriteriaId":"5D45127E-A544-40A0-9D34-BD70D95C9772"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.10_.0.06s:*:*:*:*:*:*:*","matchCriteriaId":"56C69C3E-C895-45C8-8182-7BB412A0C828"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A1FDD507-C38B-4C38-A54F-3DA6F07AD0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6F2B7AC2-CF08-4AC9-9A71-3A8130F9F9AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4D9564B-B92E-4C97-87FF-B56D62DCA775"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:1.5.17:*:*:*:*:*:*:*","matchCriteriaId":"FF2AD44D-3BE8-4541-B62D-9F01D46F8E6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:1.5.18:*:*:*:*:*:*:*","matchCriteriaId":"8BF2E08B-9046-41A1-BEDE-EB0B6436315C"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"811E1BE8-3868-49F8-B6E8-D5705559B02E"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"D67C9DB4-E46C-4E84-82D9-AF48EFDAEFBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:1.7:*:*:*:*:*:*:*","matchCriteriaId":"CF0E1BF0-6629-40DC-AB23-0256BABD0CB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"1AC4E7E5-FCC1-46B0-B69F-F1F6B36838ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"2C4AED89-F862-4071-8E94-481A59EDAE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7A3CB6FF-3840-4E80-A0A4-614D6686D2B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"67010B0B-ECE7-4EE5-B103-05DC637E150F"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1355EF99-35FC-44A7-BC56-F7C0EA49BF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6DDA8F10-B059-4403-A790-EFC8822588B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A06BCD31-3FB6-468B-9BC9-EA573717B19F"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"360238CC-3BF5-4750-B16D-8A2E0257022E"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"0C55C754-E213-4E79-AA7B-2CAF8A464388"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.1:*:*:*:*:*:*:*","matchCriteriaId":"647BA524-5A79-408C-BBF2-5780BC522B64"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D599C49D-4D7D-4C44-9D8D-A3F76746BBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7B4DC717-0785-4C19-8A33-ACA5F378DF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"858843D3-84BB-48B6-80D1-1271AE60150D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.01.05.08:*:*:*:*:*:*:*","matchCriteriaId":"B931D4F8-23F5-4ABA-A457-959995D30C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.02.00.00:*:*:*:*:*:*:*","matchCriteriaId":"BE6A023E-9C2A-487F-B5CE-674C766BFE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.02.00.01:*:*:*:*:*:*:*","matchCriteriaId":"6A15ACA2-D500-4260-B51A-6FE6AB5A45A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0A7B80E0-40BB-4B4E-9711-AF293A038DD4"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9EFCFFE8-9CAD-4A7F-9751-8627E6297C9F"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D3653856-207E-46A7-92DD-D7F377F1829A"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7E4627BB-0D75-44BC-989F-0E85C9FA0E2B"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"19053434-F9E7-4839-AB5A-B226CC4616A5"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"D04CABBA-7BEB-44EC-A6E4-A31E41A62BD7"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"8D15C938-4DAB-4011-80EE-A2663E20BFC1"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C9C056ED-2492-4B1C-BCB9-4F36806C4A48"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A72FC232-A2CB-443B-9A4A-8BBFEFE6517C"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.3:-:*:*:*:*:*:*","matchCriteriaId":"BA347CD3-0619-4EA2-A736-B59EE9E3AC12"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"4ACEF29C-3225-43A7-9E07-FBCCF555887E"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"46D932AF-FB1A-464D-BA3D-2DC2D3C187CD"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.3:rc3:*:*:*:*:*:*","matchCriteriaId":"9F532860-9E26-45C3-9FB3-6B0888F1279A"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A037FAA6-6D26-4496-BC67-03475B4D1155"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D3831DD3-E783-4200-8986-FDBF7DD9BA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.2:*:*:*:*:*:*:*","matchCriteriaId":"2909C9D5-3D8F-4C41-B0E7-A0C0B432C19A"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.3:*:*:*:*:*:*:*","matchCriteriaId":"E09436DF-E3C1-4C03-A3BE-73C4BC84BB7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"699764B6-0F86-4AB0-86A3-4F2E69AD820C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.0:*:*:*:*:*:*:*","matchCriteriaId":"7562ADC4-0D01-4FC2-98F0-1F4041BDA52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5:*:*:*:*:*:*:*","matchCriteriaId":"E6FAB588-BDBE-4A04-AB9E-4F700A3951F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:*","matchCriteriaId":"E1B83F84-D1EF-43B4-8620-3C1BCCE44553"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:*","matchCriteriaId":"41169D2F-4F16-466A-82E9-AD0735472B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*","matchCriteriaId":"947699C3-D9DE-411A-99C0-44ADD1D2223A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*","matchCriteriaId":"15F668C0-8420-4401-AB0F-479575596CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CDDCC7B6-34CA-4551-9833-306B93E517BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6D69C160-39F7-48B8-B9A3-CC86690453C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:1.5:*:*:*:*:*:*:*","matchCriteriaId":"166BF638-ABDC-4BB9-BD4E-2B22681AD9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8FA6420B-9F6A-48F4-A445-12B60A320347"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6-15:*:i386:*:*:*:*:*","matchCriteriaId":"09F3FB7B-0F68-49F3-A3B7-977A687A42E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6b-3:*:i386:*:*:*:*:*","matchCriteriaId":"088F2FF7-96E5-455E-A35B-D99F9854EC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386:*:*:*:*:*","matchCriteriaId":"FFA721BF-1B2E-479F-BF25-02D441BF175B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386_dev:*:*:*:*:*","matchCriteriaId":"AFEDCE49-21CC-4168-818F-4C638EE3B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386_perl:*:*:*:*:*","matchCriteriaId":"B7D18F9B-C0BE-4DE8-81F4-5BF56C00BF41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:servercluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8F0F78F4-E81E-4C6B-AB73-D6AAE191060E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:servercluster:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DF1A5808-6D5D-48AD-9470-5A6510D17913"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:1_2.0:*:*:*:*:*:*:*","matchCriteriaId":"C1E8990D-D9A0-4A71-9D87-EC047E01B0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:1_3.0:*:*:*:*:*:*:*","matchCriteriaId":"6DBCC172-6867-4DFD-AAEF-9BDB4DA21F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C2F2BEEA-46BB-4718-B0F3-B4EC62B678A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8D09E11C-C5BB-409E-BB0D-7F351250419B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6B06A05D-AA31-441D-9FC2-3558648C3B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_securitycluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C0886901-6F93-44C1-B774-84D7E5D9554C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_securitycluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3F203A80-7C1E-4A04-8E99-63525E176753"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_webcluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CA0A204C-158B-4014-A53C-75E0CD63E0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_webcluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"085BA581-7DA5-4FA4-A888-351281FD0A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.20:*:*:*:*:*:*:*","matchCriteriaId":"9519BCB2-B401-44CE-97F6-847BB36AE45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.30:*:*:*:*:*:*:*","matchCriteriaId":"BBE573E8-DD94-4293-99AE-27B9067B3ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.40:*:*:*:*:*:*:*","matchCriteriaId":"D14413DA-5199-4282-9E22-D347E9D8E469"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"05CC5F49-0E9E-45D8-827D-A5940566DB25"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.0.1_build_2129:*:*:*:*:*:*:*","matchCriteriaId":"5D94EE19-6CE9-4E02-8174-D9954CDBF02B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E4BEE3-AE7B-4481-B724-2E644E18ACC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.5.1_build_5336:*:*:*:*:*:*:*","matchCriteriaId":"EAAB7052-E0B6-472E-920B-A0F0AEA25D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:3.0_build_7592:*:*:*:*:*:*:*","matchCriteriaId":"8CE38F15-BD42-4171-8670-86AA8169A60C"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"20C0BD87-CE4B-49D2-89BE-EF282C43AD72"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C3E6C4A8-59F4-43EE-8413-E95289037598"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FE76357A-27E6-4D85-9AA0-1BB658C41568"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C56C5FDB-24E2-479D-87CA-164CD28567D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AEF6C16F-8EDF-4A24-BFEF-6A304D654EEB"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D982AE39-BB57-49E7-B5FE-5EF1ADE2F019"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg:*:*:*:*:*:*:*:*","matchCriteriaId":"1B6CFEC9-0F8F-4CD4-ABD1-E6533F910F7F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"12DE5E22-DF93-46BE-85A3-D4E04379E901"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11500:*:*:*:*:*:*:*:*","matchCriteriaId":"BF28C435-C036-4507-8E3F-44E722F9974A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4480_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"CDA957E2-ABF9-49B2-874F-3FC3060CE0B0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4490_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"5F2CDFE7-6853-4A31-85C0-50C57A8D606A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:mds_9000:*:*:*:*:*:*:*:*","matchCriteriaId":"0F2ED90B-DDBA-49DE-AC78-20E7D77C8858"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:secure_content_accelerator:10000:*:*:*:*:*:*:*","matchCriteriaId":"408A9DB0-81EF-4186-B338-44954E67289B"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0C5F92-7E93-4C3F-B22B-E6612A4D3E10"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.01:*:*:*:*:*:*:*","matchCriteriaId":"2D0DC4B4-9AD9-4AC8-BFA7-A3D209B5D089"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.02:*:*:*:*:*:*:*","matchCriteriaId":"303362A5-9C3C-4C85-8C97-2AB12CE01BF6"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.03:*:*:*:*:*:*:*","matchCriteriaId":"FED22DC1-E06B-4511-B920-6DAB792262D8"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.04:*:*:*:*:*:*:*","matchCriteriaId":"4CE44CA7-4BC7-4C2B-948F-2ACABB91528B"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F757B2A7-869F-4702-81EB-466317A79D61"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.1.02:*:*:*:*:*:*:*","matchCriteriaId":"01F6E9A9-6C85-48DA-BC61-55F8EACCB59F"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:crypto_accelerator_4000:1.0:*:*:*:*:*:*:*","matchCriteriaId":"64AF1E33-4086-43E2-8F54-DA75A99D4B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos_ca_sa:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"53D16F03-A4C7-4497-AB74-499F208FF059"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos_ca_sa:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"13A33EC1-836B-4C8C-AC18-B5BD4F90E612"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*","matchCriteriaId":"58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C558CED8-8342-46CB-9F52-580B626D320E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0F85D19E-6C26-429D-B876-F34238B9DAAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FEC7CCF7-CBC6-4EDC-8EDD-884DFFFBCC7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"E5011A33-CD6D-4EFC-ACFD-E51C9AE726A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4.101\\):*:*:*:*:*:*:*","matchCriteriaId":"09063867-0E64-4630-B35B-4CCA348E4DAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*","matchCriteriaId":"78F98CD7-A352-483C-9968-8FB2627A7CBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F97FE485-705F-4707-B6C6-0EF9E8A85D5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E2B925E8-D2C2-4E8C-AC21-0C422245C482"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"B9170562-872E-4C32-869C-B10FF35A925E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"D0927A68-8BB2-4F03-8396-E9CACC158FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"559DDBA3-2AF4-4A0C-B219-6779BA931F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*","matchCriteriaId":"ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5226C9CC-6933-4F10-B426-B47782C606FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"757DAE9A-B25D-4B8A-A41B-66C2897B537E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"5E3DC170-E279-4725-B9EE-6840B5685CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3.100\\):*:*:*:*:*:*:*","matchCriteriaId":"8091EDA9-BD18-47F7-8CEC-E086238647C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6F867890-74A4-4892-B99A-27DB4603B873"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"CE05B514-F094-4632-B25B-973F976F6409"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"3392428D-1A85-4472-A276-C482A78E2CE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.102\\):*:*:*:*:*:*:*","matchCriteriaId":"40954985-16E6-4F37-B014-6A55166AE093"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.109\\):*:*:*:*:*:*:*","matchCriteriaId":"0C097809-1FEF-4417-A201-42291CC29122"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00045.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=107953412903636&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108403806509920&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11139","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200403-03.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/o-101.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/484726","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:023","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_07_openssl.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openssl.org/news/secadv_20040317.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-120.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-121.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9899","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.trustix.org/errata/2004/0012","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.uniras.gov.uk/vuls/2004/224012/index.htm","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-078A.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15508","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=107953412903636&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108403806509920&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200403-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/o-101.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/484726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_07_openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openssl.org/news/secadv_20040317.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-120.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-121.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.trustix.org/errata/2004/0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.uniras.gov.uk/vuls/2004/224012/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-078A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2004-0607","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2026-06-16T22:05:58.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication."},{"lang":"es","value":"La función eay_check_x509cert en KAME Racoon verifica como buenos certificados incluso cuando la validación OpenSLL falla, lo que podría permitir a atacantes remotos saltarse la autenticación."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:*:*:*:*:*:*:*","matchCriteriaId":"ADAAFB6A-A22F-4539-8B12-AD5BE5829208"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E7BC2543-F91E-40A0-AF3D-47A8EC7A5FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"30B05AF4-3F58-439D-BADD-C9758C4BBA0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"6B925C34-CB57-443E-8190-34D490377F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"F534ABF0-F79F-4BDD-AD0C-705868AD72C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF7C24-5329-491C-B5F5-E2C2513B244C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc4:*:*:*:*:*:*:*","matchCriteriaId":"69EE38D7-0EC3-4349-ADA6-121D0A0C2DE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc5:*:*:*:*:*:*:*","matchCriteriaId":"947B349F-6D8D-4EE2-8350-F544F8B152C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kame:racoon:*:*:*:*:*:*:*:*","matchCriteriaId":"E477F0A9-8027-435B-8F99-A15D1D74220A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kame:racoon:2003-07-11:*:*:*:*:*:*:*","matchCriteriaId":"F311F249-417C-4514-A144-E21A57078574"},{"vulnerable":true,"criteria":"cpe:2.3:a:kame:racoon:2004-04-05:*:*:*:*:*:*:*","matchCriteriaId":"AC1BA7DD-5218-41A0-9D5F-79A45D22A2A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kame:racoon:2004-04-07b:*:*:*:*:*:*:*","matchCriteriaId":"92E51298-8789-44B0-B64F-6D8D90034404"},{"vulnerable":true,"criteria":"cpe:2.3:a:kame:racoon:2004-05-03:*:*:*:*:*:*:*","matchCriteriaId":"75ABB0EA-A057-486E-BD66-3378B28545BD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*","matchCriteriaId":"81B543F9-C209-46C2-B0AE-E14818A6992E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*","matchCriteriaId":"DB89C970-DE94-4E09-A90A-077DB83AD156"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108726102304507&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108731967126033&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11863","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11877","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-17.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010495","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=245982","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7113","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-308.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10546","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16414","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9163","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108726102304507&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108731967126033&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200406-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=245982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-308.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2662","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2026-06-16T22:10:05.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service (resource consumption or crash) via certain data related to OpenSSL, which causes a thread to terminate but continue to hold resources."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:soft3304:04webserver:1.41:*:*:*:*:*:*:*","matchCriteriaId":"5B119958-1FD8-4EB5-B24F-52ED07D3A2B8"}]}]}],"references":[{"url":"http://www.soft3304.net/04WebServer/Security.html","source":"cve@mitre.org"},{"url":"http://www.soft3304.net/04WebServer/Security.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0975","sourceIdentifier":"cve@mitre.org","published":"2005-02-09T05:00:00.000","lastModified":"2026-06-16T22:06:46.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*","matchCriteriaId":"E4F3F3BB-E004-4FD9-9580-F2D5F3ED3701"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*","matchCriteriaId":"3528DABD-B821-4D23-AE12-614A9CA92C46"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"9E661D58-18DF-4CCF-9892-F873618F4535"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136302","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12973","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-603","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200411-15.xml","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-476.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11293","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0050","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17583","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10621","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A164","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200411-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-476.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A164","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2005-2531","sourceIdentifier":"cve@mitre.org","published":"2005-08-24T04:00:00.000","lastModified":"2026-06-16T22:15:08.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenVPN before 2.0.1, when running with \"verb 0\" and without TLS authentication, does not properly flush the OpenSSL error queue when a client fails certificate authentication to the server and causes the error to be processed by the wrong client, which allows remote attackers to cause a denial of service (client disconnection) via a large number of failed authentication attempts."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6457C946-123B-4B85-9253-D284A7A16A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"8D0ECEAF-401A-434E-9B0A-1A234BAEFC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0.1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E751FA0E-0DF4-4F81-912A-1A132640246D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0.1_rc3:*:*:*:*:*:*:*","matchCriteriaId":"43F61AC6-EDF6-4818-BA51-3EAA299680B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0.1_rc4:*:*:*:*:*:*:*","matchCriteriaId":"D32984D8-9631-407B-834E-303B9405A425"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0.1_rc5:*:*:*:*:*:*:*","matchCriteriaId":"CB44A872-3FE2-47E9-BA84-B6E1015E1973"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0.1_rc6:*:*:*:*:*:*:*","matchCriteriaId":"F020080D-7181-400D-988E-6844D1653464"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0.1_rc7:*:*:*:*:*:*:*","matchCriteriaId":"86D08038-9815-4222-9CD3-1211FE5954A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"2BDEBEDA-437A-4942-8A71-7B25DD558BCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"0EB8A78E-DAB9-4A72-BC54-58230E1E9B9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta3:*:*:*:*:*:*:*","matchCriteriaId":"D5D74ED1-34C5-4F95-A941-83664AFFF2ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta4:*:*:*:*:*:*:*","matchCriteriaId":"0747C1A9-C404-4FBD-AA8F-9DBB70FEB4F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta5:*:*:*:*:*:*:*","matchCriteriaId":"5A3B1AD4-9EA0-4D86-90E1-3366FBC5629D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta6:*:*:*:*:*:*:*","matchCriteriaId":"8E483BD0-CAB9-4DA0-AAA4-A934B8318FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta7:*:*:*:*:*:*:*","matchCriteriaId":"6F04FAB1-A558-4F93-9FBF-043DE259A813"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta8:*:*:*:*:*:*:*","matchCriteriaId":"A189A733-3130-41B4-94DD-E99E294D0FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta9:*:*:*:*:*:*:*","matchCriteriaId":"7DEE5695-DC49-445D-864A-4739E16DF762"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6FBF146F-2CFA-4F14-BFBC-E01B58F9F72B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta11:*:*:*:*:*:*:*","matchCriteriaId":"E5D263CA-8B2C-4B66-8990-6224BAF52A8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta12:*:*:*:*:*:*:*","matchCriteriaId":"825C9FCE-AD76-4E32-8FEC-EEFA0662BC04"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta13:*:*:*:*:*:*:*","matchCriteriaId":"2C7519FA-831A-41D7-AFC3-B9457E6DFB4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta15:*:*:*:*:*:*:*","matchCriteriaId":"DFB79AFD-493F-41F1-9EC1-8BCC0D28A914"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta16:*:*:*:*:*:*:*","matchCriteriaId":"2C8F091B-194A-4FC5-87F4-A76CB490F3F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta17:*:*:*:*:*:*:*","matchCriteriaId":"11716B49-A920-4A1B-BEA5-4105213B9731"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta18:*:*:*:*:*:*:*","matchCriteriaId":"756A7AF5-E502-4EDC-9693-4041C993E3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta19:*:*:*:*:*:*:*","matchCriteriaId":"9885BC3E-1854-4561-9906-FFAEECA5B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta20:*:*:*:*:*:*:*","matchCriteriaId":"D7B7759F-F228-436D-BC86-7317B0109C02"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta28:*:*:*:*:*:*:*","matchCriteriaId":"ADB9BD19-1BF9-42D0-9E43-7D95EE010347"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"7F0A6E23-6456-4305-A7DA-8CA1D506D4F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"D985B9F0-5B4F-4120-8ECF-506C5F6179FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"CF7E6096-58BF-47F1-982B-27A9ED735AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"62362541-FE20-47ED-9E03-94216A3D43CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc5:*:*:*:*:*:*:*","matchCriteriaId":"C0BD7019-BBA5-4D08-85C8-571D2EC03FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc6:*:*:*:*:*:*:*","matchCriteriaId":"0D1D56A4-A03C-445C-993B-1AA12024D4FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc7:*:*:*:*:*:*:*","matchCriteriaId":"F563B1FD-FC1F-4304-8141-A1188A190835"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc8:*:*:*:*:*:*:*","matchCriteriaId":"4269ED1A-3031-4572-B134-62C6E533D176"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc9:*:*:*:*:*:*:*","matchCriteriaId":"140999A7-E9BB-4459-B3F8-48DF8F5DFE0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc10:*:*:*:*:*:*:*","matchCriteriaId":"41CD75B0-24D0-40BA-A4FB-925BD5414298"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc11:*:*:*:*:*:*:*","matchCriteriaId":"DED8F3C5-8E43-4B07-8224-38BF4774F4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc12:*:*:*:*:*:*:*","matchCriteriaId":"3EC88614-E782-447B-B854-955498FAAA13"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc13:*:*:*:*:*:*:*","matchCriteriaId":"D2C1B8EE-3C12-452F-986E-6FD8A230685A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc14:*:*:*:*:*:*:*","matchCriteriaId":"E5AC6851-F63E-47D7-BDEF-3BFF39E94D9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc15:*:*:*:*:*:*:*","matchCriteriaId":"685F5555-793D-4FAA-8CF4-578490CFAC6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc16:*:*:*:*:*:*:*","matchCriteriaId":"E688CF0C-134B-49E2-AEB3-45ECACB8B5FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc17:*:*:*:*:*:*:*","matchCriteriaId":"1D385327-D1FF-4A22-A0C0-0C5AA53590C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc18:*:*:*:*:*:*:*","matchCriteriaId":"51329755-1DBF-40E1-960C-E924CDC4B22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc19:*:*:*:*:*:*:*","matchCriteriaId":"FCE65AC5-C218-456F-86FB-1C8BEC3C4598"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc20:*:*:*:*:*:*:*","matchCriteriaId":"1412133F-3B44-43B6-A4FF-FF80E7B564E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc21:*:*:*:*:*:*:*","matchCriteriaId":"B55EE355-28A1-4955-9ADD-A8E02376C9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test1:*:*:*:*:*:*:*","matchCriteriaId":"E942C13E-6B54-465F-8026-ED49BD7EA2F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test2:*:*:*:*:*:*:*","matchCriteriaId":"AADF30CF-AD36-45EB-AF50-EB0533B20B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test3:*:*:*:*:*:*:*","matchCriteriaId":"AD078F82-361C-4B38-86E8-85E129F41A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test5:*:*:*:*:*:*:*","matchCriteriaId":"F9831C92-7717-4650-8689-3C41B773C5CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test6:*:*:*:*:*:*:*","matchCriteriaId":"2B3521E7-572E-4ADD-AAF6-F1AE505B4BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test7:*:*:*:*:*:*:*","matchCriteriaId":"F73290B2-384B-4B0F-8763-EF4D5D7C39FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test8:*:*:*:*:*:*:*","matchCriteriaId":"4728B3CD-5B54-4B0B-8967-DE7D9E1474F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test9:*:*:*:*:*:*:*","matchCriteriaId":"F353B495-D69A-4831-9E5B-F15F8F749C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test10:*:*:*:*:*:*:*","matchCriteriaId":"16647409-3ADD-4E86-A053-4A7B8365700E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test11:*:*:*:*:*:*:*","matchCriteriaId":"1E5CA9F6-68FE-4412-8CD5-F85E970249F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test12:*:*:*:*:*:*:*","matchCriteriaId":"74A74354-1EAB-4A4F-A79C-C04E9BCDF594"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test14:*:*:*:*:*:*:*","matchCriteriaId":"03A016A3-CAA9-4FCB-B909-F4163CE1E19E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test15:*:*:*:*:*:*:*","matchCriteriaId":"82A53B7C-8E9D-4DD6-8B00-628F7796A365"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test16:*:*:*:*:*:*:*","matchCriteriaId":"3D5AADA5-05DA-4660-9636-A3B737916A0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test17:*:*:*:*:*:*:*","matchCriteriaId":"2778FEDE-063B-4454-9FA7-F526334CF9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test18:*:*:*:*:*:*:*","matchCriteriaId":"989D471D-3F81-4018-A124-7FBEB3F4AB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test19:*:*:*:*:*:*:*","matchCriteriaId":"D4EA97AE-B2DD-40F8-81E1-467E895CE736"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test20:*:*:*:*:*:*:*","matchCriteriaId":"F0C82A6A-4548-4508-B337-1061E57D78AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test21:*:*:*:*:*:*:*","matchCriteriaId":"36A972BC-6956-4195-933C-F3694BFEFB50"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test22:*:*:*:*:*:*:*","matchCriteriaId":"E9EF5187-C008-4927-B5CB-A491768E9822"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test23:*:*:*:*:*:*:*","matchCriteriaId":"B4A39ECE-7C8D-4BB8-A408-08EA0879F03F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test24:*:*:*:*:*:*:*","matchCriteriaId":"6C67474C-3274-4F62-AF98-6953F9744522"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test26:*:*:*:*:*:*:*","matchCriteriaId":"D799CAF5-BFC3-4A80-8AE2-D292B7F9D9CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test27:*:*:*:*:*:*:*","matchCriteriaId":"98D3B905-FCD7-4136-A94C-76A95994CD85"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test29:*:*:*:*:*:*:*","matchCriteriaId":"1AE172A1-D9A5-4FF7-B316-4E0BD639B35D"}]}]}],"references":[{"url":"http://openvpn.net/changelog.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/16463","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17103","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2005/dsa-851","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:145","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2005_20_sr.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/14605","source":"cve@mitre.org"},{"url":"http://openvpn.net/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/16463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2005_20_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/14605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-2532","sourceIdentifier":"cve@mitre.org","published":"2005-08-24T04:00:00.000","lastModified":"2026-06-16T22:15:09.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated attackers to cause a denial of service (client disconnection) via a large number of packets that can not be decrypted."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6457C946-123B-4B85-9253-D284A7A16A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"8D0ECEAF-401A-434E-9B0A-1A234BAEFC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0.1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E751FA0E-0DF4-4F81-912A-1A132640246D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0.1_rc3:*:*:*:*:*:*:*","matchCriteriaId":"43F61AC6-EDF6-4818-BA51-3EAA299680B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0.1_rc4:*:*:*:*:*:*:*","matchCriteriaId":"D32984D8-9631-407B-834E-303B9405A425"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0.1_rc5:*:*:*:*:*:*:*","matchCriteriaId":"CB44A872-3FE2-47E9-BA84-B6E1015E1973"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0.1_rc6:*:*:*:*:*:*:*","matchCriteriaId":"F020080D-7181-400D-988E-6844D1653464"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0.1_rc7:*:*:*:*:*:*:*","matchCriteriaId":"86D08038-9815-4222-9CD3-1211FE5954A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"2BDEBEDA-437A-4942-8A71-7B25DD558BCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"0EB8A78E-DAB9-4A72-BC54-58230E1E9B9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta3:*:*:*:*:*:*:*","matchCriteriaId":"D5D74ED1-34C5-4F95-A941-83664AFFF2ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta4:*:*:*:*:*:*:*","matchCriteriaId":"0747C1A9-C404-4FBD-AA8F-9DBB70FEB4F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta5:*:*:*:*:*:*:*","matchCriteriaId":"5A3B1AD4-9EA0-4D86-90E1-3366FBC5629D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta6:*:*:*:*:*:*:*","matchCriteriaId":"8E483BD0-CAB9-4DA0-AAA4-A934B8318FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta7:*:*:*:*:*:*:*","matchCriteriaId":"6F04FAB1-A558-4F93-9FBF-043DE259A813"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta8:*:*:*:*:*:*:*","matchCriteriaId":"A189A733-3130-41B4-94DD-E99E294D0FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta9:*:*:*:*:*:*:*","matchCriteriaId":"7DEE5695-DC49-445D-864A-4739E16DF762"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6FBF146F-2CFA-4F14-BFBC-E01B58F9F72B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta11:*:*:*:*:*:*:*","matchCriteriaId":"E5D263CA-8B2C-4B66-8990-6224BAF52A8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta12:*:*:*:*:*:*:*","matchCriteriaId":"825C9FCE-AD76-4E32-8FEC-EEFA0662BC04"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta13:*:*:*:*:*:*:*","matchCriteriaId":"2C7519FA-831A-41D7-AFC3-B9457E6DFB4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta15:*:*:*:*:*:*:*","matchCriteriaId":"DFB79AFD-493F-41F1-9EC1-8BCC0D28A914"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta16:*:*:*:*:*:*:*","matchCriteriaId":"2C8F091B-194A-4FC5-87F4-A76CB490F3F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta17:*:*:*:*:*:*:*","matchCriteriaId":"11716B49-A920-4A1B-BEA5-4105213B9731"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta18:*:*:*:*:*:*:*","matchCriteriaId":"756A7AF5-E502-4EDC-9693-4041C993E3BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta19:*:*:*:*:*:*:*","matchCriteriaId":"9885BC3E-1854-4561-9906-FFAEECA5B6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta20:*:*:*:*:*:*:*","matchCriteriaId":"D7B7759F-F228-436D-BC86-7317B0109C02"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_beta28:*:*:*:*:*:*:*","matchCriteriaId":"ADB9BD19-1BF9-42D0-9E43-7D95EE010347"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"7F0A6E23-6456-4305-A7DA-8CA1D506D4F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"D985B9F0-5B4F-4120-8ECF-506C5F6179FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"CF7E6096-58BF-47F1-982B-27A9ED735AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"62362541-FE20-47ED-9E03-94216A3D43CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc5:*:*:*:*:*:*:*","matchCriteriaId":"C0BD7019-BBA5-4D08-85C8-571D2EC03FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc6:*:*:*:*:*:*:*","matchCriteriaId":"0D1D56A4-A03C-445C-993B-1AA12024D4FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc7:*:*:*:*:*:*:*","matchCriteriaId":"F563B1FD-FC1F-4304-8141-A1188A190835"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc8:*:*:*:*:*:*:*","matchCriteriaId":"4269ED1A-3031-4572-B134-62C6E533D176"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc9:*:*:*:*:*:*:*","matchCriteriaId":"140999A7-E9BB-4459-B3F8-48DF8F5DFE0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc10:*:*:*:*:*:*:*","matchCriteriaId":"41CD75B0-24D0-40BA-A4FB-925BD5414298"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc11:*:*:*:*:*:*:*","matchCriteriaId":"DED8F3C5-8E43-4B07-8224-38BF4774F4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc12:*:*:*:*:*:*:*","matchCriteriaId":"3EC88614-E782-447B-B854-955498FAAA13"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc13:*:*:*:*:*:*:*","matchCriteriaId":"D2C1B8EE-3C12-452F-986E-6FD8A230685A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc14:*:*:*:*:*:*:*","matchCriteriaId":"E5AC6851-F63E-47D7-BDEF-3BFF39E94D9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc15:*:*:*:*:*:*:*","matchCriteriaId":"685F5555-793D-4FAA-8CF4-578490CFAC6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc16:*:*:*:*:*:*:*","matchCriteriaId":"E688CF0C-134B-49E2-AEB3-45ECACB8B5FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc17:*:*:*:*:*:*:*","matchCriteriaId":"1D385327-D1FF-4A22-A0C0-0C5AA53590C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc18:*:*:*:*:*:*:*","matchCriteriaId":"51329755-1DBF-40E1-960C-E924CDC4B22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc19:*:*:*:*:*:*:*","matchCriteriaId":"FCE65AC5-C218-456F-86FB-1C8BEC3C4598"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc20:*:*:*:*:*:*:*","matchCriteriaId":"1412133F-3B44-43B6-A4FF-FF80E7B564E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_rc21:*:*:*:*:*:*:*","matchCriteriaId":"B55EE355-28A1-4955-9ADD-A8E02376C9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test1:*:*:*:*:*:*:*","matchCriteriaId":"E942C13E-6B54-465F-8026-ED49BD7EA2F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test2:*:*:*:*:*:*:*","matchCriteriaId":"AADF30CF-AD36-45EB-AF50-EB0533B20B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test3:*:*:*:*:*:*:*","matchCriteriaId":"AD078F82-361C-4B38-86E8-85E129F41A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test5:*:*:*:*:*:*:*","matchCriteriaId":"F9831C92-7717-4650-8689-3C41B773C5CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test6:*:*:*:*:*:*:*","matchCriteriaId":"2B3521E7-572E-4ADD-AAF6-F1AE505B4BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test7:*:*:*:*:*:*:*","matchCriteriaId":"F73290B2-384B-4B0F-8763-EF4D5D7C39FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test8:*:*:*:*:*:*:*","matchCriteriaId":"4728B3CD-5B54-4B0B-8967-DE7D9E1474F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test9:*:*:*:*:*:*:*","matchCriteriaId":"F353B495-D69A-4831-9E5B-F15F8F749C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test10:*:*:*:*:*:*:*","matchCriteriaId":"16647409-3ADD-4E86-A053-4A7B8365700E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test11:*:*:*:*:*:*:*","matchCriteriaId":"1E5CA9F6-68FE-4412-8CD5-F85E970249F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test12:*:*:*:*:*:*:*","matchCriteriaId":"74A74354-1EAB-4A4F-A79C-C04E9BCDF594"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test14:*:*:*:*:*:*:*","matchCriteriaId":"03A016A3-CAA9-4FCB-B909-F4163CE1E19E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test15:*:*:*:*:*:*:*","matchCriteriaId":"82A53B7C-8E9D-4DD6-8B00-628F7796A365"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test16:*:*:*:*:*:*:*","matchCriteriaId":"3D5AADA5-05DA-4660-9636-A3B737916A0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test17:*:*:*:*:*:*:*","matchCriteriaId":"2778FEDE-063B-4454-9FA7-F526334CF9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test18:*:*:*:*:*:*:*","matchCriteriaId":"989D471D-3F81-4018-A124-7FBEB3F4AB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test19:*:*:*:*:*:*:*","matchCriteriaId":"D4EA97AE-B2DD-40F8-81E1-467E895CE736"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test20:*:*:*:*:*:*:*","matchCriteriaId":"F0C82A6A-4548-4508-B337-1061E57D78AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test21:*:*:*:*:*:*:*","matchCriteriaId":"36A972BC-6956-4195-933C-F3694BFEFB50"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test22:*:*:*:*:*:*:*","matchCriteriaId":"E9EF5187-C008-4927-B5CB-A491768E9822"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test23:*:*:*:*:*:*:*","matchCriteriaId":"B4A39ECE-7C8D-4BB8-A408-08EA0879F03F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test24:*:*:*:*:*:*:*","matchCriteriaId":"6C67474C-3274-4F62-AF98-6953F9744522"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test26:*:*:*:*:*:*:*","matchCriteriaId":"D799CAF5-BFC3-4A80-8AE2-D292B7F9D9CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test27:*:*:*:*:*:*:*","matchCriteriaId":"98D3B905-FCD7-4136-A94C-76A95994CD85"},{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:2.0_test29:*:*:*:*:*:*:*","matchCriteriaId":"1AE172A1-D9A5-4FF7-B316-4E0BD639B35D"}]}]}],"references":[{"url":"http://openvpn.net/changelog.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/16463","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17103","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2005/dsa-851","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:145","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/14607","source":"cve@mitre.org"},{"url":"http://openvpn.net/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/16463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/14607","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-2946","sourceIdentifier":"cve@mitre.org","published":"2005-09-16T22:03:00.000","lastModified":"2026-06-16T22:15:57.043","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attackers to forge certificates with a valid certificate authority signature."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.8","matchCriteriaId":"725D1BFE-7122-43F8-A9EC-E1737C7AD73C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*","matchCriteriaId":"778A6957-455B-420A-BAAF-E7F88FF4FB1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*","matchCriteriaId":"42E47538-08EE-4DC1-AC17-883C44CF77BB"}]}]}],"references":[{"url":"http://www.cits.rub.de/MD5Collisions/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-179-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.ubuntu.com/show_bug.cgi?id=13593","source":"cve@mitre.org","tags":["Broken Link","Issue Tracking","Vendor Advisory"]},{"url":"http://www.cits.rub.de/MD5Collisions/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-179-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.ubuntu.com/show_bug.cgi?id=13593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Issue Tracking","Vendor Advisory"]}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169803\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n","lastModified":"2006-09-20T00:00:00"}]}},{"cve":{"id":"CVE-2005-2995","sourceIdentifier":"cve@mitre.org","published":"2005-09-20T22:03:00.000","lastModified":"2026-06-16T22:16:03.200","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary file used by autoconf/randpass when openssl is not available, or (2) the mtx.[PID] temporary file in mtx-changer.in."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","baseScore":3.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bacula:bacula:*:*:*:*:*:*:*:*","versionEndIncluding":"1.36.3","matchCriteriaId":"4E22C1AF-AAD5-4CAB-AB5D-C0F3BD4ABBD5"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=104986","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=full-disclosure&m=112721654126735&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2005_22_sr.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.zataz.net/adviso/bacula-09192005.txt","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=104986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=full-disclosure&m=112721654126735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2005_22_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.zataz.net/adviso/bacula-09192005.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2005-2969","sourceIdentifier":"secalert@redhat.com","published":"2005-10-18T21:02:00.000","lastModified":"2026-06-16T22:15:59.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is required for preventing protocol version rollback attacks, which allows remote attackers to force a client and server to use a weaker protocol than needed via a man-in-the-middle attack."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers/dir5.10.3_docs_relnotes.pdf","source":"secalert@redhat.com"},{"url":"http://docs.info.apple.com/article.html?artnum=302847","source":"secalert@redhat.com"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100","source":"secalert@redhat.com"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540","source":"secalert@redhat.com"},{"url":"http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17146","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17151","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17153","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17169","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17178","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17180","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17189","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17191","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17210","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17259","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17288","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17335","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17344","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17389","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17409","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17432","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17466","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17589","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17617","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17632","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17813","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17888","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/18045","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/18123","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/18165","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/18663","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/19185","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/21827","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23280","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23340","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23843","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23915","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25973","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/26893","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31492","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1015032","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101974-1","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-031.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm","source":"secalert@redhat.com"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754","source":"secalert@redhat.com"},{"url":"http://www.cisco.com/warp/public/707/cisco-response-20051202-openssl.shtml","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2005/dsa-875","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2005/dsa-881","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2005/dsa-882","source":"secalert@redhat.com"},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html","source":"secalert@redhat.com"},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS07-016_e/index-e.html","source":"secalert@redhat.com"},{"url":"http://www.juniper.net/support/security/alerts/PSN-2005-12-025.txt","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:179","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2005_61_openssl.html","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20051011.txt","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-762.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-800.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/15071","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/15647","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/24799","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2005/2036","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2005/2659","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2005/2710","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2005/2908","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2005/3002","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2005/3056","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3531","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/0326","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/0343","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/2457","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35287","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-1633","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11454","source":"secalert@redhat.com"},{"url":"ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers/dir5.10.3_docs_relnotes.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=302847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/18045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/18123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/18165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/18663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1015032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101974-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-031.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1SSRVHMCHMC_C081516_754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-response-20051202-openssl.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS06-022_e/01-e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS07-016_e/index-e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.juniper.net/support/security/alerts/PSN-2005-12-025.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2005_61_openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20051011.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-762.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-800.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/24799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2005/2036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2005/2659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2005/2710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2005/2908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2005/3002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2005/3056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/0326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/0343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11454","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2005-1730","sourceIdentifier":"cve@mitre.org","published":"2005-12-31T05:00:00.000","lastModified":"2026-06-16T22:13:34.930","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted packets, as demonstrated by \"OpenSSL ASN.1 brute forcer.\"  NOTE: this issue might overlap CVE-2004-0079, CVE-2004-0081, or CVE-2004-0112."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"1D663FA7-C80B-4076-8A04-68D27660A8DC"}]}]}],"references":[{"url":"http://www.cirt.dk/advisories/cirt-32-advisory.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8732","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/ASN.1-Brute.c","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2005/0744","source":"cve@mitre.org"},{"url":"http://www.cirt.dk/advisories/cirt-32-advisory.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/ASN.1-Brute.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2005/0744","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"This vulnerability is addressed in the following product update:\r\nhttp://www.novell.com/products/consoles/","vendorComments":[{"organization":"Red Hat","comment":"Based on our research we believe that the "OpenSSL ASN.1 brute forcer." is actually exploiting flaws CVE-2003-0543, CVE-2003-0544, CVE-2003-0545.  Those issues are all addressed in Red Hat Enterprise Linux and therefore CVE-2005-1730 is a duplicate assignment.","lastModified":"2007-04-02T00:00:00"}]}},{"cve":{"id":"CVE-2006-1599","sourceIdentifier":"cve@mitre.org","published":"2006-04-03T17:04:00.000","lastModified":"2026-06-16T22:23:16.453","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in VCEngine.php in v-creator before 1.3-pre3, when the VC_CRYPTO_METHOD option is OPENSSL, allows remote attackers to execute arbitrary commands, possibly due to problems in the (1) encrypt and (2) decrypt functions."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:v-creator.com:v-creator:1.3_pre2:*:*:*:*:*:*:*","matchCriteriaId":"4200F9A9-B46E-4543-B043-85857DEBF505"}]}]}],"references":[{"url":"http://secunia.com/advisories/19453","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=557129","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/24304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/17328","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/1189","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25560","source":"cve@mitre.org"},{"url":"https://sourceforge.net/p/vcreator/news/2006/03/v-creator-v13-pre3-released/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=557129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/24304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/17328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/1189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceforge.net/p/vcreator/news/2006/03/v-creator-v13-pre3-released/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-3419","sourceIdentifier":"cve@mitre.org","published":"2006-07-07T00:05:00.000","lastModified":"2026-06-16T22:27:01.777","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of cryptographically strong RAND_bytes, and seeds the entropy value at start-up with 160-bit chunks without reseeding, which makes it easier for attackers to conduct brute force guessing attacks."},{"lang":"es","value":"Tor versiones anteriores a la 0.1.1.20 utiliza bytes pseudo aleatorios OpenSSL (RAND_pseudo_bytes) en vez de RAND_bytes que son criptográficamente fuertes y genera el valor de entropía al arranque con fragmentos de 160 bits sin regeneración de semillas, lo cual facilita a los atacantes llevar a cabo ataques de adivinación por fuerza bruta."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FD529C5A-D6E8-4FFD-B552-B91A9BD409F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*","matchCriteriaId":"4490AC9B-E8D8-4C97-866B-AB76AB2536F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*","matchCriteriaId":"0DBA48C9-C0CA-41C8-BDD3-0E69ED7AAC8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*","matchCriteriaId":"9A8970D3-4C0B-4B6F-BEB4-08FF20FAEBF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*","matchCriteriaId":"2A2A2B60-8D31-4B59-8407-9CE62709906A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*","matchCriteriaId":"CDE02B1D-AA25-4364-8E54-583A0304FA69"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*","matchCriteriaId":"DE3AB095-3F57-4922-BC12-0842FA158555"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*","matchCriteriaId":"F066E4A3-BE6F-4FF7-AE7A-C8E3A33D7197"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*","matchCriteriaId":"811FD436-8BD2-463A-8072-A915FFCA33C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*","matchCriteriaId":"83F107CD-7334-4D9D-AEFF-FA5F8DE72576"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*","matchCriteriaId":"07EB2211-D97D-47EF-94D1-01E7A3879BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*","matchCriteriaId":"28DC8889-4E65-46D0-AA68-6390757862D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*","matchCriteriaId":"4E4C7373-82F1-49E6-90D6-7A02AC52F255"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*","matchCriteriaId":"7F3D847A-D8F1-40CE-AE33-A397654C55B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*","matchCriteriaId":"8B3A2CE6-F8DE-4B8A-BEEA-6732E4342792"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*","matchCriteriaId":"D9238A5E-28EA-405A-8CF9-7410CB2CA6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7301BA35-2522-4144-83C2-6A3A6D329A8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"37993416-D81F-4F6B-AB2C-16F351BE68D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"295C826F-CBEB-4BA2-A760-22D58D231BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D230B213-4A35-488F-A4B5-87F77BD65E5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"AFF88062-8726-4C1D-8F93-ABA0B1654656"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"1A710565-6960-4D46-A1EB-86FE0927A66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"81F6C954-7C0A-41E5-9719-26082E40C5E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"43784D06-2D2A-46D1-ADE2-B947B3F10F33"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"196BF37C-CD62-4D4C-A716-827B0E6A5065"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"20076B65-48E6-4DA2-BDA1-AC4F904B449D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"48A2CCAD-397B-4037-B99B-F0A622FAF8D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"50E74056-DD32-49E6-808A-5A9B755F1DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6E2103A8-0F3F-4226-A5D8-4BF239FD6636"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"FDA35257-80F6-4DDF-94EF-ABE1ED039ED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"0490AB18-A839-400D-88E2-D918B1EEFA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"DBED980F-A8B9-4C44-957C-FD18867B1799"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"3E033E0C-C7F6-4910-A795-28BA60E9431A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"5AAAACA5-F431-4D83-B04D-EC9A81C96184"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"A1D5B46C-E7D3-495F-861C-12324F09EC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"639E3063-34CC-4AE2-B055-92D36ECAADF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"C5305AF8-E26C-44A1-B546-AAC5D1C2D053"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"48DCAB29-4EF2-4A50-A941-DA5D89E27D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"33928D26-39DF-4E15-9979-F9484913C219"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7A8F70D6-4B9C-4131-A419-4AD9325DFFC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"48B8A291-E1F7-444F-8C5B-C3C38541B3D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"24581D9F-02AF-42E6-A3D7-9CAD43E26477"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3B978E3E-69D7-46BD-BD88-1409A546FF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E7FED829-128A-4F87-9838-AD0C9C11E458"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3A39B543-5978-46FC-AF85-D635D87E3B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4CE0BE0D-F509-4A91-BDD7-A0A8324498D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"803498D9-C750-4D16-8ADF-2F98E71888A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"65F6A78C-76E9-4A5F-92BD-B16D1CBE934F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C04309D4-FEA8-47EA-BB9A-8CBD341B475F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"8607F3C9-F185-4B87-8A1B-B9495A4F244D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"525A0E09-D4CF-42AA-8EB2-47E0E6CBA179"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"667201BB-5FDA-4E51-B865-0AF8507DBCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"C1BA7280-1DF3-4A98-AFD2-C67406A32EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"D70542A1-34B3-4EBF-BAA7-6B009CCFD22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"6F2DADBB-D90B-4B9D-B9DA-65AC39C61043"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"DB01B6B6-66C3-443B-BA3D-0DB17BDCC0BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"D4E6BA17-6AE9-45ED-A8C3-F79463F427BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"3C7D396C-36CA-4579-BCA0-672440CB5CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*","matchCriteriaId":"811CE708-CEE6-4B0F-98E5-E138C06EA382"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*","matchCriteriaId":"6860F802-FEC2-449A-A5FC-AFACCA8633CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*","matchCriteriaId":"A4CA23F0-7C49-430E-AD20-7C7BDCC1EEC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D4D9E677-01D2-4800-82AA-F5585475D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*","matchCriteriaId":"9C589D4F-60B3-450B-860A-9975BB47BBE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*","matchCriteriaId":"DA331167-6A2F-402F-A28F-9EE7B6F20207"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*","matchCriteriaId":"F42AB6B3-7BD8-4B55-B269-DCA664A25FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D4740B10-EFB8-4F79-88C1-9B6F5897A71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*","matchCriteriaId":"31CA7556-D132-4E81-8E13-C7E025AF20AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*","matchCriteriaId":"D224FA8D-4C5A-48BE-92F2-1EC57782046D"}]}]}],"references":[{"url":"http://secunia.com/advisories/20514","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200606-04.xml","source":"cve@mitre.org"},{"url":"http://tor.eff.org/cvs/tor/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/25880","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200606-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tor.eff.org/cvs/tor/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/25880","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-4339","sourceIdentifier":"secalert@redhat.com","published":"2006-09-05T17:04:00.000","lastModified":"2026-06-16T22:28:53.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1."},{"lang":"es","value":"OpenSSL en versiones anteriores a 0.9.7, 0.9.7 en versiones anteriores a 0.9.7k y 0.9.8 en versiones anteriores a 0.9.8c, cuando usa una clave RSA con exponente 3, elimina relleno PKCS-1 antes de generar un hash, lo que permite a atacantes remotos falsificar una firma PKCS #1 v1.5 que está firmada por dicha clave RSA e impide a OpenSSL verificar correctamente los certificados X.509 y otros que utilizan PKCS #1."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.7","matchCriteriaId":"118A4D99-B8CC-4276-BB72-4C384B16585D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc","source":"secalert@redhat.com"},{"url":"http://dev2dev.bea.com/pub/advisory/238","source":"secalert@redhat.com"},{"url":"http://docs.info.apple.com/article.html?artnum=304829","source":"secalert@redhat.com"},{"url":"http://docs.info.apple.com/article.html?artnum=307177","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771","source":"secalert@redhat.com"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540","source":"secalert@redhat.com"},{"url":"http://jvn.jp/en/jp/JVN51615542/index.html","source":"secalert@redhat.com"},{"url":"http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bind-announce&m=116253119512445&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"secalert@redhat.com"},{"url":"http://openvpn.net/changelog.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/21709","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21767","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21776","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21778","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21785","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21791","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21812","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21823","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21846","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21852","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21870","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21873","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21906","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21927","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21930","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21982","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22036","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22044","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22066","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22161","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22226","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22232","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22259","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22260","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22284","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22325","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22446","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22509","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22513","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22523","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22545","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22585","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22689","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22711","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22733","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22799","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22932","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22934","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22936","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22937","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22938","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22939","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22940","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22948","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22949","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23155","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23455","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23680","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23794","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23841","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23915","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24099","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24930","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24950","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25284","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25399","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25649","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/26329","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/26893","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28115","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31492","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38567","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38568","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/41818","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60799","source":"secalert@redhat.com"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200609-05.xml","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200609-18.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1016791","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1017522","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.566955","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.605306","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1","source":"secalert@redhat.com"},{"url":"http://support.attachmate.com/techdocs/2127.html","source":"secalert@redhat.com"},{"url":"http://support.attachmate.com/techdocs/2128.html","source":"secalert@redhat.com"},{"url":"http://support.attachmate.com/techdocs/2137.html","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm","source":"secalert@redhat.com"},{"url":"http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf","source":"secalert@redhat.com"},{"url":"http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html","source":"secalert@redhat.com"},{"url":"http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html","source":"secalert@redhat.com"},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2006/dsa-1174","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml","source":"secalert@redhat.com"},{"url":"http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/845620","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:161","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:177","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:178","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:207","source":"secalert@redhat.com"},{"url":"http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2006_26_sr.html","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2006_55_ssl.html","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2006_61_opera.html","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html","source":"secalert@redhat.com"},{"url":"http://www.openbsd.org/errata.html","source":"secalert@redhat.com"},{"url":"http://www.openoffice.org/security/cves/CVE-2006-4339.html","source":"secalert@redhat.com"},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html","source":"secalert@redhat.com"},{"url":"http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20060905.txt","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.opera.com/support/search/supsearch.dml?index=845","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/28549","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0661.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0062.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0072.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0073.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/445231/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/445822/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/450327/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/456546/100/200/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/19849","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/22083","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28276","source":"secalert@redhat.com"},{"url":"http://www.serv-u.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://www.sybase.com/detail?id=1047991","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-339-1","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-333A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.us.debian.org/security/2006/dsa-1173","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3453","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3566","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3730","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3748","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3793","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3899","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3936","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4205","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4206","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4207","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4216","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4327","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4329","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4366","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4417","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4586","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4744","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4750","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/5146","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/0254","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/0343","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/1401","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/1815","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/1945","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/2163","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/2315","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/2783","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/4224","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0366","source":"secalert@redhat.com"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742","source":"secalert@redhat.com"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28755","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-1633","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-616","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656","source":"secalert@redhat.com"},{"url":"https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html","source":"secalert@redhat.com"},{"url":"https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144","source":"secalert@redhat.com"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev2dev.bea.com/pub/advisory/238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=304829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=307177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01070495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvn.jp/en/jp/JVN51615542/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000079.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bind-announce&m=116253119512445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openvpn.net/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/41818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-06:19.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200609-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200609-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1016791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1017522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.566955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.605306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102656-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102657-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102696-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102744-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102759-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201247-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000148.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.attachmate.com/techdocs/2127.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.attachmate.com/techdocs/2128.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.attachmate.com/techdocs/2137.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-188.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.arkoon.fr/upload/alertes/40AK-2006-04-FR-1.1_SSL360_OPENSSL_RSA.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/845620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2006_26_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2006_55_ssl.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2006_61_opera.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openoffice.org/security/cves/CVE-2006-4339.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.029-bind.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20060905.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.opera.com/support/search/supsearch.dml?index=845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/28549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0661.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/445231/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/445822/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/450327/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/456546/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/19849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/22083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.serv-u.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sybase.com/detail?id=1047991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-339-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-333A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us.debian.org/security/2006/dsa-1173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/5146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/0254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/0343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/4224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://secure-support.novell.com/KanisaPlatform/Publishing/41/3143224_f.SAL_Public.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Vulnerable.  This issue affects OpenSSL and OpenSSL compatibility packages in Red Hat Enterprise Linux 2.1, 3, and 4.  Updates, along with our advisory are available at the URL below.\nhttp://rhn.redhat.com/errata/RHSA-2006-0661.html\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2006-2937","sourceIdentifier":"secalert@redhat.com","published":"2006-09-28T18:07:00.000","lastModified":"2026-06-16T22:26:04.643","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition."},{"lang":"es","value":"OpenSSL 0.9.7 en versiones anteriores a 0.9.7l y 0.9.8 en versiones anteriores a 0.9.8d permite a atacantes remotos provocar una denegación de servicio (bucle infinito y consumo de memoria) a través de estructuras ASN.1 mal formadas que desencadenan una condición de error manejada incorrectamente."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc","source":"secalert@redhat.com"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc","source":"secalert@redhat.com"},{"url":"http://docs.info.apple.com/article.html?artnum=304829","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771","source":"secalert@redhat.com"},{"url":"http://issues.rpath.com/browse/RPL-613","source":"secalert@redhat.com"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100","source":"secalert@redhat.com"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540","source":"secalert@redhat.com"},{"url":"http://kolab.org/security/kolab-vendor-notice-11.txt","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bind-announce&m=116253119512445&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"secalert@redhat.com"},{"url":"http://openbsd.org/errata.html#openssl2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://openvpn.net/changelog.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/22094","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22116","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22130","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22165","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22166","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22172","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22186","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22193","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22207","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22212","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22216","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22220","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22240","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22259","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22260","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22284","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22298","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22330","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22385","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22460","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22487","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22544","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22626","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22671","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22772","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22799","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23038","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23131","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23155","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23280","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23309","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23340","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23351","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23680","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23915","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24930","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24950","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25889","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/26329","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30124","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31492","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31531","source":"secalert@redhat.com"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200610-11.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1016943","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1","source":"secalert@redhat.com"},{"url":"http://support.attachmate.com/techdocs/2374.html","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm","source":"secalert@redhat.com"},{"url":"http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf","source":"secalert@redhat.com"},{"url":"http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html","source":"secalert@redhat.com"},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2006/dsa-1185","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.f-secure.com/security/fsc-2006-6.shtml","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/247744","source":"secalert@redhat.com","tags":["Patch","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:172","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:177","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:178","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2006_24_sr.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_58_openssl.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openssl.org/news/secadv_20060928.txt","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/29260","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0695.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/447318/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/447393/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/456546/100/200/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/20248","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28276","source":"secalert@redhat.com"},{"url":"http://www.serv-u.com/releasenotes/","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.trustix.org/errata/2006/0054","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-353-1","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-333A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3820","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3860","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3869","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3902","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3936","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4019","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4036","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4264","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4327","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4329","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4401","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4417","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4750","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4761","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4980","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/0343","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/1401","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/2315","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/2783","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2396","source":"secalert@redhat.com"},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29228","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10560","source":"secalert@redhat.com"},{"url":"https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144","source":"secalert@redhat.com"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=304829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://issues.rpath.com/browse/RPL-613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kolab.org/security/kolab-vendor-notice-11.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bind-announce&m=116253119512445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openbsd.org/errata.html#openssl2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://openvpn.net/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/22094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200610-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1016943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.attachmate.com/techdocs/2374.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.f-secure.com/security/fsc-2006-6.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/247744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2006_24_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_58_openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openssl.org/news/secadv_20060928.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/29260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0695.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/447318/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/447393/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/456546/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/20248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/28276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.serv-u.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.trustix.org/errata/2006/0054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-353-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-333A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/0343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2006-2940","sourceIdentifier":"secalert@redhat.com","published":"2006-09-28T18:07:00.000","lastModified":"2026-06-16T22:26:05.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) \"public exponent\" or (2) \"public modulus\" values in X.509 certificates that require extra time to process when using RSA signature verification."},{"lang":"es","value":"OpenSSL 0.9.7 en versiones anteriores a 0.9.7l, 0.9.8 en versiones anteriores a 0.9.8d y versiones anteriores permite a atacantes provocar una denegación de servicio (consumo de CPU) a través de claves públicas parasitarias con valores grandes de (1) \"exponente público\" o (2) \"módulo público\" en certificados X.509 que requiere tiempo extra de procesamiento cuando utiliza una verificación de firma RSA."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc","source":"secalert@redhat.com"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc","source":"secalert@redhat.com"},{"url":"http://docs.info.apple.com/article.html?artnum=304829","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771","source":"secalert@redhat.com"},{"url":"http://issues.rpath.com/browse/RPL-613","source":"secalert@redhat.com"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100","source":"secalert@redhat.com"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540","source":"secalert@redhat.com"},{"url":"http://kolab.org/security/kolab-vendor-notice-11.txt","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bind-announce&m=116253119512445&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"secalert@redhat.com"},{"url":"http://openbsd.org/errata.html#openssl2","source":"secalert@redhat.com"},{"url":"http://openvpn.net/changelog.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22094","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22116","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22130","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22165","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22166","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22172","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22186","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22193","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22207","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22212","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22216","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22220","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22240","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22259","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22260","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22284","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22298","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22330","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22385","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22460","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22487","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22500","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22544","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22626","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22671","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22772","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22799","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23038","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23155","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23280","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23309","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23340","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23351","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23680","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23794","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23915","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24930","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24950","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25889","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/26329","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/26893","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30124","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31492","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31531","source":"secalert@redhat.com"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200610-11.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1016943","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1017522","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1","source":"secalert@redhat.com"},{"url":"http://support.attachmate.com/techdocs/2374.html","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm","source":"secalert@redhat.com"},{"url":"http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf","source":"secalert@redhat.com"},{"url":"http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf","source":"secalert@redhat.com"},{"url":"http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html","source":"secalert@redhat.com"},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2006/dsa-1185","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2006/dsa-1195","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:172","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:177","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:178","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2006_24_sr.html","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2006_58_openssl.html","source":"secalert@redhat.com"},{"url":"http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20060928.txt","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/29261","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0695.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/447318/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/447393/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/456546/100/200/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/20247","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/22083","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/28276","source":"secalert@redhat.com"},{"url":"http://www.serv-u.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://www.trustix.org/errata/2006/0054","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-353-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-353-2","source":"secalert@redhat.com"},{"url":"http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-333A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3820","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3860","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3869","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3902","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3936","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4019","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4036","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4264","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4327","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4329","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4401","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4417","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4750","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4980","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/0343","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/1401","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/2315","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/2783","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2396","source":"secalert@redhat.com"},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29230","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-1633","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10311","source":"secalert@redhat.com"},{"url":"https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144","source":"secalert@redhat.com"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=304829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://issues.rpath.com/browse/RPL-613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kolab.org/security/kolab-vendor-notice-11.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bind-announce&m=116253119512445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openbsd.org/errata.html#openssl2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openvpn.net/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200610-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1016943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1017522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.attachmate.com/techdocs/2374.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2006_24_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2006_58_openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20060928.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/29261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0695.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/447318/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/447393/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/456546/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/20247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/22083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/28276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.serv-u.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.org/errata/2006/0054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-353-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-353-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-333A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/0343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2006-3738","sourceIdentifier":"secalert@redhat.com","published":"2006-09-28T18:07:00.000","lastModified":"2026-06-16T22:27:41.887","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers."},{"lang":"es","value":"Desbordamiento de búfer en la función SSL_get_shared_ciphers en OpenSSL 0.9.7 anterior a 0.9.7l, 0.9.8 anterior a 0.9.8d, y versiones anteriores tiene impacto y vectores de ataque no especificados implicando una lista de cifras larga."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc","source":"secalert@redhat.com"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc","source":"secalert@redhat.com"},{"url":"http://docs.info.apple.com/article.html?artnum=304829","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771","source":"secalert@redhat.com"},{"url":"http://issues.rpath.com/browse/RPL-613","source":"secalert@redhat.com"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100","source":"secalert@redhat.com"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540","source":"secalert@redhat.com"},{"url":"http://kolab.org/security/kolab-vendor-notice-11.txt","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"secalert@redhat.com"},{"url":"http://openbsd.org/errata.html#openssl2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://openvpn.net/changelog.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://secunia.com/advisories/22094","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22116","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22130","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22165","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22166","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22172","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22186","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22193","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22207","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22212","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22216","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22220","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22240","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22259","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22260","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22284","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22298","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22330","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22385","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22460","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22487","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22500","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22544","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22626","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22633","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22654","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22772","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22791","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22799","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23038","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23155","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23280","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23309","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23340","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23680","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23794","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23915","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24930","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24950","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25889","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/26329","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30124","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30161","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31492","source":"secalert@redhat.com"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200610-11.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1016943","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://securitytracker.com/id?1017522","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102711-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201531-1","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm","source":"secalert@redhat.com"},{"url":"http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html","source":"secalert@redhat.com"},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2006/dsa-1185","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.debian.org/security/2006/dsa-1195","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/547300","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:172","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:177","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:178","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2006_24_sr.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_58_openssl.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openssl.org/news/secadv_20060928.txt","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/29262","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0695.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/447318/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/447393/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/456546/100/200/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/470460/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/20249","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/22083","source":"secalert@redhat.com"},{"url":"http://www.serv-u.com/releasenotes/","source":"secalert@redhat.com"},{"url":"http://www.trustix.org/errata/2006/0054","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-353-1","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-333A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3820","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3860","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3869","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3902","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/3936","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4036","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4264","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4314","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4401","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4417","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4443","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4750","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/0343","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/1401","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/2315","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/2783","source":"secalert@redhat.com"},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf","source":"secalert@redhat.com"},{"url":"http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=498093&RenditionID=&poid=8881","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29237","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4256","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9370","source":"secalert@redhat.com"},{"url":"https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144","source":"secalert@redhat.com"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=304829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://issues.rpath.com/browse/RPL-613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kolab.org/security/kolab-vendor-notice-11.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openbsd.org/errata.html#openssl2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://openvpn.net/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/22094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200610-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1016943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1017522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102711-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201531-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2006/dsa-1195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/547300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2006_24_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_58_openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openssl.org/news/secadv_20060928.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/29262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0695.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/447318/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/447393/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/456546/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/470460/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/20249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/22083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.serv-u.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.org/errata/2006/0054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-353-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-333A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/0343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=498093&RenditionID=&poid=8881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorSolution":"Failed exploit attempts may crash applications, denying service to legitimate users.","vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2006-4343","sourceIdentifier":"secalert@redhat.com","published":"2006-09-28T18:07:00.000","lastModified":"2026-06-16T22:28:54.950","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference."},{"lang":"es","value":"La función get_server_hello código del cliente SSLv2 en OpenSSL 0.9.7 anterior a 0.9.7l, 0.9.8 anterior a 0.9.8d, y versiones anteriores permite a servidores remotos provocar una denegación de servicio (caída del cliente) mediante vectores desconocidos que disparan un referencia a un puntero nulo."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*","matchCriteriaId":"42E47538-08EE-4DC1-AC17-883C44CF77BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*","matchCriteriaId":"0FA3A32E-445A-4D39-A8D5-75F5370AD23D"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://docs.info.apple.com/article.html?artnum=304829","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://issues.rpath.com/browse/RPL-613","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://kolab.org/security/kolab-vendor-notice-11.txt","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openbsd.org/errata.html#openssl2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://openvpn.net/changelog.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22094","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22116","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22130","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22165","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22166","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22172","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22186","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22193","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22207","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22212","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22216","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22220","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22240","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22259","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22260","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22284","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22298","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22330","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22385","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22460","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22487","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22500","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22544","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22626","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22758","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22772","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22791","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22799","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23038","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23155","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23280","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23309","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23340","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23680","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23794","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23915","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/24950","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/25420","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/25889","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/26329","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30124","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31492","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200610-11.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1016943","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1017522","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102711-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201531-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1185","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1195","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ingate.com/relnote-452.php","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/386964","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:172","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:177","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:178","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2006_24_sr.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2006_58_openssl.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20060928.txt","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/29263","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0695.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/447318/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/447393/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/456546/100/200/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/20246","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/22083","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28276","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.serv-u.com/releasenotes/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2006/0054","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-353-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-333A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3820","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3860","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3869","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3902","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3936","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4036","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4264","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4401","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4417","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4443","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4750","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/0343","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/1401","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/1973","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/2783","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29240","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10207","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4356","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/4773","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://docs.info.apple.com/article.html?artnum=304829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://issues.rpath.com/browse/RPL-613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://kolab.org/security/kolab-vendor-notice-11.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openbsd.org/errata.html#openssl2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://openvpn.net/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/22799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/24950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/25420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/25889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/26329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200610-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1016943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1017522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102711-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201531-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ingate.com/relnote-452.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/386964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2006_24_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2006_58_openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20060928.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/29263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0695.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/447318/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/447393/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/456546/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489739/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/20246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/22083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/28276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.serv-u.com/releasenotes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2006/0054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-353-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-333A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/0343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/1401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/1973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/2783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0905/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/4773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}],"evaluatorSolution":"This vulnerability is addressed in the following product releases:\r\nOpenSSL Project, OpenSSL, 0.9.7l (or later)\r\nOpenSSL Project, OpenSSL, 0.9.8d (or later)","vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2007-3108","sourceIdentifier":"secalert@redhat.com","published":"2007-08-08T01:17:00.000","lastModified":"2026-06-16T22:41:05.303","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys."},{"lang":"es","value":"La función BN_from_montgomery en el crypto/bn/bn_mont.c del OpenSSL 0.9.8e y anteriores, no interpreta adecuadamente la multiplicación Montgomery, lo que permite a usuarios locales llevar a cabo ataques por canal colateral (side-channel) y recuperar claves privadas RSA."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:N/A:N","baseScore":1.2,"accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8e","matchCriteriaId":"636B0CAF-5A47-4CC7-9DAF-52090894B647"}]}]}],"references":[{"url":"http://cvs.openssl.org/chngview?cn=16275","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000002.html","source":"secalert@redhat.com"},{"url":"http://openssl.org/news/patch-CVE-2007-3108.txt","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/26411","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/26893","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/27021","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/27078","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/27097","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/27205","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/27330","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/27770","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/27870","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28368","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30161","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30220","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31467","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31489","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31531","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200710-06.xml","source":"secalert@redhat.com"},{"url":"http://support.attachmate.com/techdocs/2374.html","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm","source":"secalert@redhat.com"},{"url":"http://www.bluecoat.com/support/securityadvisories/advisory_openssl_rsa_key_reconstruction_vulnerability","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1571","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/724968","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/RGII-74KLP3","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:193","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0813.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0964.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-1003.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/476341/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/485936/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/486859/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/25163","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0001.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0013.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/2759","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/4010","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0064","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2361","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2362","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2396","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-1613","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-1633","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9984","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/522-1/","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/chngview?cn=16275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/patch-CVE-2007-3108.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200710-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.attachmate.com/techdocs/2374.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bluecoat.com/support/securityadvisories/advisory_openssl_rsa_key_reconstruction_vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/724968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/RGII-74KLP3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0813.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0964.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-1003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/476341/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485936/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486859/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/25163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/4010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/522-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"This paper describes a possible side-channel attack that hasn’t been proven outside of a lab environment. In reality many factors would make this harder to exploit. If exploited, a local user could obtain RSA private keys (for example for web sites being run on the server). We have rated this as affecting Red Hat products with moderate security severity. Although the OpenSSL team have produced a patch for this issue, it is non-trivial and will require more testing before we can deploy it in a future update.  Our current plan is as follows:\n\n- To include a backported fix in an OpenSSL update as part of Enterprise Linux 4.6. This will get testing via beta and give time for more extensive internal and upstream testing\n- To release an update for OpenSSL for other platforms at the same time as 4.6 is released\n http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-3108\n","lastModified":"2007-08-14T00:00:00"}]}},{"cve":{"id":"CVE-2007-4931","sourceIdentifier":"cve@mitre.org","published":"2007-09-18T18:17:00.000","lastModified":"2026-06-16T22:45:06.847","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"HP System Management Homepage (SMH) for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL update, which has unknown impact and attack vectors, probably related to previous vulnerabilities for OpenSSL."},{"lang":"es","value":"HP System Management Homepage (SMH) para Windows, cuando se usa en conjunto con HP Version Control Agent o Version Control REpository Manager, deja el software OpenSSL activo después de una actualización OpenSSL, lo cual tiene impacto y vectores de ataque desconocidos, probablemente relacionados con vulnerabilidades previas para OpenSSL."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AD9A9442-18B7-4858-AB3A-19FE272A5C61"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"90042282-9151-4D8E-8093-D85E57BD332C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D3EF92B4-AAC3-4957-9D8F-1796C2045962"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D44CEFC1-CE95-4549-A981-C3F259075B77"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CFA42455-F9B9-49BD-BAFA-4A02C554ECE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6426924C-AA5C-4C93-AB8B-9314CD010139"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A6E5C789-9827-47DF-A47C-454DF7687E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.3.132:*:*:*:*:*:*:*","matchCriteriaId":"D85F0390-B076-4B54-9E4E-67472FF3759E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"29FE29FC-AD24-4C89-9AAC-9D49C54A5CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"20EBB25A-A1DE-4943-9EE5-0FCF21A55666"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"B61485E4-6EC1-4886-AB47-F5BC8E72A08A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"2E354FF4-5CDD-4B79-B56C-2C774B235D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B3DACC6F-DCE8-4890-BE47-488CB7B2DF77"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:system_management_homepage:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"8AFAF26C-7BFE-479E-880C-B13E78780625"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01164065","source":"cve@mitre.org"},{"url":"http://osvdb.org/45941","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1018696","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/25675","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01164065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/45941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1018696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/25675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-5135","sourceIdentifier":"cve@mitre.org","published":"2007-09-27T20:17:00.000","lastModified":"2026-06-16T22:45:30.737","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow.  NOTE: this issue was introduced as a result of a fix for CVE-2006-3738.  As of 20071012, it is unknown whether code execution is possible."},{"lang":"es","value":"Un error por un paso en la función SSL_get_shared_ciphers en OpenSSL versiones 0.9.7 hasta 0.9.7l, y versiones 0.9.8 hasta 0.9.8f, podría permitir a atacantes remotos ejecutar código arbitrario por medio de un paquete diseñado que desencadena un subdesbordamiento de búfer de un byte. NOTA: este problema fue introducido como resultado de una corrección para CVE-2006-3738. A partir de 20071012, se desconoce si es posible la ejecución de código."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22130","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27012","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27021","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27031","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27051","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27078","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27097","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27186","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27205","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27229","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27330","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27394","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27851","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27870","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27961","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28368","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29242","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30124","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30161","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31308","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31326","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31467","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31489","source":"cve@mitre.org"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-07:08.openssl.asc","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200710-06.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3179","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103130-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200858-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0241","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2007/dsa-1379","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:193","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2007_20_sr.html","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata40.html","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata41.html","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata42.html","source":"cve@mitre.org"},{"url":"http://www.openssl.org/news/secadv_20071012.txt","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0813.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0964.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-1003.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/480855/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/481217/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/481488/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/481506/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/484353/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/485936/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/486859/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/25831","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1018755","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0001.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0013.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/3325","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/3625","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/4042","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/4144","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/0064","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2361","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2362","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4037","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4038","source":"cve@mitre.org"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=194039","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36837","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-1769","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-1770","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10904","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5337","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/522-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00218.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2008/000002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-07:08.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200710-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103130-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200858-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-485.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2007/dsa-1379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2007_20_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata40.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata41.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata42.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20071012.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0813.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0964.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-1003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/480855/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/481217/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/481488/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/481506/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/484353/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/485936/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/486859/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/25831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1018755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/3325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/3625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/4042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/4144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=194039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/522-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00218.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2007-4995","sourceIdentifier":"secalert@redhat.com","published":"2007-10-13T01:17:00.000","lastModified":"2026-06-16T22:45:14.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Un error por un paso en la implementación de DTLS en OpenSSL versiones 0.9.8 anteriores a 0.9.8f, permite a atacantes remotos ejecutar código arbitrario por medio de vectores no especificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=195634","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01299773","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25878","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27205","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27217","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27271","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27363","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27434","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27933","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28084","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30161","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30220","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30852","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200710-30.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1018810","source":"secalert@redhat.com"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738962","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1571","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:237","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20071012.txt","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0964.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/482167/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/26055","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/3487","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/4219","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1937/references","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37185","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10288","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/534-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00218.html","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=195634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01299773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/28084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200710-30.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1018810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20071012.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0964.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/482167/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/26055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/3487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/4219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1937/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/534-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00218.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of OpenSSL as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.  An update to correct this issue for Enterprise Linux 5 is available.\nhttp://rhn.redhat.com/cve/CVE-2007-4995.html\n\nPlease note that the CVE description is incorrect, this issue did not affect upstream versions of OpenSSL prior to 0.9.8.","lastModified":"2007-10-24T00:00:00"}]}},{"cve":{"id":"CVE-2007-5536","sourceIdentifier":"cve@mitre.org","published":"2007-10-18T00:17:00.000","lastModified":"2026-06-16T22:46:21.353","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in OpenSSL before A.00.09.07l on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to cause a denial of service via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad sin especificar en el OpenSSL anterior al A.00.09.07l en el HP-UX B.11.11, B.11.23 y B.11.31 permite a usuarios locales provocar una denegación de servicio a través de vectores sin especificar."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:hpe:openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"a.00.09.07l","matchCriteriaId":"E2128672-52B0-42E1-B979-CBF79F2A6CF5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.31:*:*:*:*:*:*:*","matchCriteriaId":"0FC82871-E47F-4431-AAE0-A714D7D22670"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01203958","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://osvdb.org/37894","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/27265","source":"cve@mitre.org","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/26093","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2007/3526","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37231","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5871","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01203958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://osvdb.org/37894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/27265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/26093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2007/3526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/37231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2007-5502","sourceIdentifier":"secalert@redhat.com","published":"2007-12-01T06:46:00.000","lastModified":"2026-06-16T22:46:17.007","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness."},{"lang":"es","value":"La implementación PRNG para OpenSSL FIPS Object Module 1.1.1 no realiza una selección previa automática de la semilla durante el test de FIPS que realiza a sí mismo. Esto genera información arbitraria que es más predecible de lo esperado y hace que, para los atacantes, sea más fácil vulnerar los mecanismos de protección basados en aleatoriedad."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:fips_object_module:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8FF77E62-FB77-4A67-B618-D71D0F5CD87F"}]}]}],"references":[{"url":"http://secunia.com/advisories/27859","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/150249","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.openssl.org/news/secadv_20071129.txt","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/26652","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019029","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/4044","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38796","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/27859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/150249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openssl.org/news/secadv_20071129.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/26652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1019029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/4044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38796","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This vulnerability only affected the OpenSSL FIPS Object Module which is not enabled or used by OpenSSL in Red Hat Enterprise Linux 2.1, 3, 4, or 5.\n","lastModified":"2007-12-03T00:00:00"}]}},{"cve":{"id":"CVE-2008-0166","sourceIdentifier":"cve@mitre.org","published":"2008-05-13T17:20:00.000","lastModified":"2026-06-16T22:49:03.963","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys."},{"lang":"es","value":"OpenSSL versión 0.9.8c-1 hasta versiones anteriores a 0.9.8g-9, sobre sistemas operativos basados en Debian usa un generador de números aleatorios que genera números predecibles, lo que facilita a atacantes remotos la conducción de ataques de adivinación por fuerza bruta contra claves criptográficas."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-338"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"0.9.8c-1","versionEndIncluding":"0.9.8g","matchCriteriaId":"8EEFA1C8-85D4-425F-A987-29AC6D10C303"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"6EBDAFF8-DE44-4E80-B6BD-E341F767F501"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*","matchCriteriaId":"823BF8BE-2309-4F67-A5E2-EAD98F723468"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://metasploit.com/users/hdm/tools/debian-openssl/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30136","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30220","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30221","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30231","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30239","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30249","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=48367252.7070603%40shemesh.biz&forum_name=rsyncrypto-devel","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1571","source":"cve@mitre.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1576","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/925211","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/492112/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29179","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020017","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-612-1","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-2","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-3","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-4","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-7","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-137A.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://16years.secvuln.info","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42375","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://news.ycombinator.com/item?id=40333169","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/5622","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5632","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5720","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://metasploit.com/users/hdm/tools/debian-openssl/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/30136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_name=48367252.7070603%40shemesh.biz&forum_name=rsyncrypto-devel","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/925211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/492112/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-612-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-612-7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA08-137A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://16years.secvuln.info","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://news.ycombinator.com/item?id=40333169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/5622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/5720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  This flaw was caused by a third-party vendor patch to the OpenSSL\nlibrary.  This patch has never been used by Red Hat, and this issue therefore does not affect any Fedora, Red Hat, or upstream supplied OpenSSL packages.","lastModified":"2008-05-13T00:00:00"}]}},{"cve":{"id":"CVE-2008-0891","sourceIdentifier":"secalert@redhat.com","published":"2008-05-29T16:32:00.000","lastModified":"2026-06-16T22:50:33.103","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service (crash) via a malformed Client Hello packet.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de doble liberación en OpenSSL 0.9.8f y 0.9.8g, cuando las extensiones de nombre de servidor TLS están habilitadas, permite a atacantes remotos provocar una denegación de servicio (caída) a través de un paquete manipulado. NOTA: Algunos de estos detalles se han obtenido de fuentes de terceros."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"}]}]}],"references":[{"url":"http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30405","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30460","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30825","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30852","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30868","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31228","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31288","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200806-08.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=615606","source":"secalert@redhat.com"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/661475","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:107","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20080528.txt","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/29405","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020121","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-620-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1680","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/1937/references","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42666","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.html","source":"secalert@redhat.com"},{"url":"http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=615606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/661475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20080528.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1020121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-620-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1937/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of OpenSSL as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-05-30T00:00:00"}]}},{"cve":{"id":"CVE-2008-1672","sourceIdentifier":"secalert@redhat.com","published":"2008-05-29T16:32:00.000","lastModified":"2026-06-16T22:52:13.157","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses \"particular cipher suites,\" which triggers a NULL pointer dereference."},{"lang":"es","value":"OpenSSL 0.9.8f y 0.9.8g permite a atacantes remotos provocar una denegación de servicio (caída) mediante una negociación TLS que omite el Server Key Excahnge y usa \"particular cipher suites.\""}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"}]}]}],"references":[{"url":"http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30405","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30460","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30825","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30852","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30868","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31228","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31288","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-08.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=615606","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/520586","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:107","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20080528.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492932/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29405","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020122","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-620-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1680","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1937/references","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42667","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/30868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/31288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200806-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=615606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/520586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20080528.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/492932/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/29405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-620-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/1937/references","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of OpenSSL as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2008-05-30T00:00:00"}]}},{"cve":{"id":"CVE-2008-1678","sourceIdentifier":"secalert@redhat.com","published":"2008-07-10T17:41:00.000","lastModified":"2026-06-16T22:52:14.983","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server mod_ssl that specify a compression algorithm."},{"lang":"es","value":"Fuga de memoria en la Función zlib_stateful_init en crypto/comp/c_zlib.c en libssl en OpenSSL v0.9.8f a la 0.9.8h, permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de múltiples llamadas, como se ha demostrado mediante una negociación cliente SSL inicial al servidor HTTP Apache (mod_ssl) que especifica un algoritmo de compresión."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=222643","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=openssl-dev&m=121060672602371&w=2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31026","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31416","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32222","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34219","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35264","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38761","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/44183","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200807-06.xml","source":"secalert@redhat.com"},{"url":"http://securityreason.com/securityalert/3981","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3216","source":"secalert@redhat.com"},{"url":"http://svn.apache.org/viewvc?view=rev&revision=654119","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:124","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1075.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31681","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/31692","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-731-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"secalert@redhat.com"},{"url":"https://bugs.edge.launchpad.net/bugs/186339","source":"secalert@redhat.com"},{"url":"https://bugs.edge.launchpad.net/bugs/224945","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=447268","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43948","source":"secalert@redhat.com"},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=44975","source":"secalert@redhat.com"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9754","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00055.html","source":"secalert@redhat.com"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=222643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=openssl-dev&m=121060672602371&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/31026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/31416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/44183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200807-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc?view=rev&revision=654119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-731-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.edge.launchpad.net/bugs/186339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.edge.launchpad.net/bugs/224945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=447268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/bugzilla/show_bug.cgi?id=44975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of mod_ssl or httpd as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5 prior to 5.3.\n\nIn Red Hat Enterprise Linux 5.3, OpenSSL packages were rebased to upstream version 0.9.8e via RHBA-2009:0181 (https://rhn.redhat.com/errata/RHBA-2009-0181.html), introducing this problem in Red Hat Enterprise Linux 5.  Updated httpd packages were released via: https://rhn.redhat.com/errata/RHSA-2009-1075.html\n\n","lastModified":"2009-05-28T00:00:00"}]}},{"cve":{"id":"CVE-2008-5410","sourceIdentifier":"cve@mitre.org","published":"2008-12-10T00:30:00.317","lastModified":"2026-06-16T22:59:55.387","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The PK11_SESSION cache in the OpenSSL PKCS#11 engine in Sun Solaris 10 does not maintain reference counts for operations with asymmetric keys, which allows context-dependent attackers to cause a denial of service (failed cryptographic operations) via unspecified vectors, related to the (1) RSA_sign and (2) RSA_verify functions."},{"lang":"es","value":"La caché PK11_SESSION en el motor OpenSSL PKCS#11 en Sun Solaris 10 no mantiene la cuenta de referencia para operaciones con claves asimétricas, lo que permite a atacantes dependientes del contexto provocar una denegación de servicio (fallos en las operaciones criptográficas) a través de vectores desconocidos, relacionado con las funciones (1) RSA_sign y (2) RSA_verify."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"}]}]}],"references":[{"url":"http://secunia.com/advisories/33050","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-138863-02-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139459-01-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246846-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32671","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1021358","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/3372","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47137","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5914","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-138863-02-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-139459-01-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-246846-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/3372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5914","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-5077","sourceIdentifier":"secalert@redhat.com","published":"2009-01-07T17:30:00.327","lastModified":"2026-06-16T22:59:12.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys."},{"lang":"es","value":"OpenSSL 0.9.8i y versiones anteriores no comprueba correctamente el valor de retorno de la función EVP_VerifyFinal, lo que permite a atacantes remotos evitar la validación de la cadena del certificado a través de una firma SSL/TLS mal formada para las claves DSA y ECDSA."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8h","matchCriteriaId":"E2EF373D-B1DE-492D-8F2B-3B9E7F4E161A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=123859864430555&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=124277349419254&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33338","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33394","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33436","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33557","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33673","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33765","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34211","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35108","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39005","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200902-02.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.544796","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-250826-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-038.htm","source":"secalert@redhat.com"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=837653","source":"secalert@redhat.com"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090123-01.html","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20090107.txt","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0004.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33150","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021523","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0040","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0289","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0362","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0558","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0904","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0913","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1338","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6380","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9155","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/704-1/","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=123859864430555&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124277349419254&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200902-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.544796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-250826-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-038.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=837653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090123-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20090107.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/704-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0021","sourceIdentifier":"secalert@redhat.com","published":"2009-01-07T17:30:00.360","lastModified":"2026-06-16T23:04:05.973","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"NTP versiones 4.2.4 anteriores a 4.2.4p5 y versiones 4.2.5 anteriores a 4.2.5p150, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados por medio de una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.4p4","matchCriteriaId":"94D9BEE4-25C2-4147-B075-50F46113F59E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"088BFFA4-1AAB-4699-9793-F731A81B296A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B3475779-383A-4128-9145-474EC08030FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p1:*:*:*:*:*:*:*","matchCriteriaId":"B980A178-2958-4B36-8AD8-3932B12C5A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p2:*:*:*:*:*:*:*","matchCriteriaId":"5D65210A-F80E-4019-91DA-49838369E03F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p3:*:*:*:*:*:*:*","matchCriteriaId":"29FAB224-3493-4273-A655-10BE44F5B5BE"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33406","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33558","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33648","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34642","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.531177","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0046.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1021533","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0042","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://lists.ntp.org/pipermail/announce/2009-January/000055.html","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10035","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.531177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1021533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/0042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://lists.ntp.org/pipermail/announce/2009-January/000055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10035","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"Note that versions 4.2.5 before 4.2.5p150 are development versions and not production versions.  Development versions are not included in the CPE configuration for CVEs."}},{"cve":{"id":"CVE-2009-0025","sourceIdentifier":"secalert@redhat.com","published":"2009-01-07T17:30:00.390","lastModified":"2026-06-16T23:04:06.690","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3 y versiones anteriores no comprueba adecuadamente el valor de retorno de la función OpenSSL DSA_verify, lo que permite a atacantes remotos eludir la validación de la cadena del certificado a través de una firma SSL/TLS mal formada, una vulnerabilidad similar a CVE-2008-5077."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*","matchCriteriaId":"C52373DC-3E05-424B-9C78-4092A75C75A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"AFE06E29-0A16-4034-A2BB-696A49798F00"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"75CECA87-F721-429B-8062-D3297233C14D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"2F1447B1-A25F-45CC-B721-3204D7107999"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc4:*:*:*:*:*:*","matchCriteriaId":"C61FB240-C932-4A3A-874D-5872F01EB352"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc5:*:*:*:*:*:*","matchCriteriaId":"999AF289-8D73-4648-ABCB-4853B9B1F230"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.0:rc6:*:*:*:*:*:*","matchCriteriaId":"6743968D-DDB2-4478-867A-642CCC492B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"098633E6-88F0-4DBC-986F-D11EDA29877F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"78725CCE-C153-4B00-8E76-ED6DFC1C86A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"1950F046-FBD4-4A92-BA70-5E80374A12AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*","matchCriteriaId":"1861756C-CC81-4EAB-8427-57A3C62BFF96"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"5E53EFD9-16B8-457D-8C27-7771018EA524"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CDD642FC-1764-4090-A32D-830CEAE69E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"79503328-9EE2-414E-A6E8-B3BABA0D6CAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2ABA5AA3-8951-4158-A4C6-64BE2010D39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc3:*:*:*:*:*:*","matchCriteriaId":"77A2D767-8E2D-4D65-ACF3-634B055023CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc4:*:*:*:*:*:*","matchCriteriaId":"D28C3D4C-5C3B-4686-9F67-6379C2AC338A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc5:*:*:*:*:*:*","matchCriteriaId":"543DE620-09A2-4055-B30C-803C714237B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc6:*:*:*:*:*:*","matchCriteriaId":"2C16513C-48A1-4FB6-AB11-F844ABC4BB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:rc7:*:*:*:*:*:*","matchCriteriaId":"607BF60B-27F1-4C85-BB5F-D66FEA05CD4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DE954FD0-56AF-4757-BAA8-B0C64703F6AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"0EC243E5-D80C-43A8-AD12-5DA0FA442086"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BF891263-4ACE-47C3-83F3-C06E49F32451"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"01C3704B-8328-46C3-ACB1-D27FD7DED508"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"FF9000CE-EB3A-4194-84D1-4BB4C5010D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.3:rc3:*:*:*:*:*:*","matchCriteriaId":"19A4E6C3-CF69-4A81-B179-EB8F656E72AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6520F4-B203-400A-8629-8A40B739DB11"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:a1:*:*:*:*:*:*","matchCriteriaId":"55D7907A-46D1-4F7D-8B2F-321214204704"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:a2:*:*:*:*:*:*","matchCriteriaId":"B06686CF-0FFD-45D8-A9F6-D13DCF3E6EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:a3:*:*:*:*:*:*","matchCriteriaId":"EBF04613-7F33-4A63-A776-47C9A0BDBF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:b1:*:*:*:*:*:*","matchCriteriaId":"FA3C3939-2065-4A8C-99F8-BE44D1D2ABA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:b2:*:*:*:*:*:*","matchCriteriaId":"DEE416F3-CDAE-4285-9EC7-F3E161EDCA0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"365BFA38-A0F6-4D48-A6B5-E534F88516DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc10:*:*:*:*:*:*","matchCriteriaId":"CF2F3360-F5C2-47C1-B2E7-935CDB47407A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"52FBAE24-C9F7-4756-A7A0-A877ABFC3444"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc3:*:*:*:*:*:*","matchCriteriaId":"A7230CE4-CD95-484C-A004-457FD4484403"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc4:*:*:*:*:*:*","matchCriteriaId":"A0BB3172-BFBC-4F56-8116-6EEC30FD566F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc5:*:*:*:*:*:*","matchCriteriaId":"D40FB919-A955-419D-9BEC-835F93E4FEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc6:*:*:*:*:*:*","matchCriteriaId":"FF8A8F48-A890-4837-8C76-1A690523B39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc7:*:*:*:*:*:*","matchCriteriaId":"399D70C9-8E61-4624-A7AD-9410AA7641B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc8:*:*:*:*:*:*","matchCriteriaId":"2BB2F03D-96C6-49CD-80FA-570FF72B493F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.0:rc9:*:*:*:*:*:*","matchCriteriaId":"60DC3DF4-4B36-4AA8-8561-C4255A8C4E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2AF07E87-B109-4B15-A358-7A454502E077"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.1:rc1:*:*:*:*:*:*","matchCriteriaId":"2E5D0852-413F-4875-93F5-64DDBCA6E85E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.1:rc2:*:*:*:*:*:*","matchCriteriaId":"301BF336-6AF6-4705-9BF1-00ED6608F572"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.2:*:*:*:*:*:*:*","matchCriteriaId":"614C9459-D526-4880-AE03-4A1558CB941F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.2:p2:*:*:*:*:*:*","matchCriteriaId":"A8B15E71-656A-4EB7-96B2-2CC9A2C19DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.2:p3:*:*:*:*:*:*","matchCriteriaId":"A969C3E7-9E4F-4767-86D1-7E6B3970A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"34B56EBF-6218-46B7-A9F2-288E40635FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1CFA05CD-0BE4-4E85-A3DE-8B3E2622159F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"A10ACCBC-6697-4BCB-9748-B966D83E0C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:rc2:*:*:*:*:*:*","matchCriteriaId":"719382EA-7D4E-46F2-92ED-DCA83AE685BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:rc3:*:*:*:*:*:*","matchCriteriaId":"9EDF0B51-76D3-4BD8-A2C7-6F21153CB886"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.3:rc4:*:*:*:*:*:*","matchCriteriaId":"2D800F08-9B7A-4284-B2EF-DCDF60DEEC04"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:*:*:*:*:*:*:*","matchCriteriaId":"D43375C5-0736-43DE-99B5-B75719D0AD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc2:*:*:*:*:*:*","matchCriteriaId":"4E492452-CBDB-43BC-A9AD-21AA84EA0653"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc3:*:*:*:*:*:*","matchCriteriaId":"D5BD68D9-6CD9-48A7-A242-38B9ADD420BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc4:*:*:*:*:*:*","matchCriteriaId":"65C15AB2-DCA7-4983-A741-3CA1D4A391A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc5:*:*:*:*:*:*","matchCriteriaId":"6C6DB780-C075-462C-B426-1917A020C4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc6:*:*:*:*:*:*","matchCriteriaId":"3B4FD922-49B2-4953-8EF2-9018B104BC20"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc7:*:*:*:*:*:*","matchCriteriaId":"367DC15C-7174-4463-8D4B-B3E43AC0A57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.4:rc8:*:*:*:*:*:*","matchCriteriaId":"CAEC7B62-DBBF-4ADD-81F7-8AD1F3642E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E4360536-0BA6-41DB-AA87-45AFB51562CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.5:b2:*:*:*:*:*:*","matchCriteriaId":"E3CBD1CC-14DF-4F00-9A5E-6D7A6604A8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.5:rc1:*:*:*:*:*:*","matchCriteriaId":"93C5ED24-5A13-4F06-BC9F-B8B8F46C1888"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.6:*:*:*:*:*:*:*","matchCriteriaId":"438AEC8C-DD71-4A25-9E9D-A89415F7EC83"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.6:rc1:*:*:*:*:*:*","matchCriteriaId":"36A47938-C5AC-4471-A791-6F21AE20B85C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.7:*:*:*:*:*:*:*","matchCriteriaId":"2CDF6B08-6BA8-400C-BF01-ABD2306FE0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.7:rc1:*:*:*:*:*:*","matchCriteriaId":"AFEDAAA4-AB94-43C6-97AE-B6E87D8E81B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.7:rc2:*:*:*:*:*:*","matchCriteriaId":"FAF29410-5230-42F9-BC07-B940FC66DA62"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2.7:rc3:*:*:*:*:*:*","matchCriteriaId":"82068202-DF42-4808-A5C7-1A68B05EA1C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4:*:*:*:*:*:*:*","matchCriteriaId":"5C8B18D7-4D15-46A7-8013-E6267127A427"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6D7C7524-6943-4D94-8835-0221F0F0CD63"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a1:*:*:*:*:*:*","matchCriteriaId":"C4B45FE3-307E-4599-B2CF-5203FA606469"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a2:*:*:*:*:*:*","matchCriteriaId":"F12E3841-1CF0-4969-A286-50769BAE31EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a3:*:*:*:*:*:*","matchCriteriaId":"D8B11586-1274-422D-873A-25DF193FB0C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a4:*:*:*:*:*:*","matchCriteriaId":"87D61CDA-BB78-4957-A502-6D77B567B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a5:*:*:*:*:*:*","matchCriteriaId":"5A31533C-BD6E-4EB4-8047-3257BF51F592"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:a6:*:*:*:*:*:*","matchCriteriaId":"D8537C88-4F73-43DD-9BDC-AF470882EED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b1:*:*:*:*:*:*","matchCriteriaId":"6D7D1A96-0A8E-4E3A-9442-701E3D1A1F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b2:*:*:*:*:*:*","matchCriteriaId":"93C23313-817F-4AB5-9058-31B0C7F954A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b3:*:*:*:*:*:*","matchCriteriaId":"FA9F93EC-1AA2-43A6-9869-8974C819370A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:b4:*:*:*:*:*:*","matchCriteriaId":"726720E2-4B59-4665-A72E-E2E996957EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8F0AA9D0-9657-4E18-BF8B-45284C2D40A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"32E4FEA8-A654-4E9F-8948-5878E7C427C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"916D4013-27A5-4688-A985-A9B77F90AC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F8583B8D-54A4-4064-810B-34F4F5A33A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.2:rc1:*:*:*:*:*:*","matchCriteriaId":"932E3F02-DD98-43FC-8077-50506E512989"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.2:rc2:*:*:*:*:*:*","matchCriteriaId":"63C2A2FD-7AE7-462A-99B2-809BE1F35C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:*:*:*:*:*:*:*","matchCriteriaId":"E01A12DF-E94B-426E-8751-96FC56105D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:b1:*:*:*:*:*:*","matchCriteriaId":"7717B1A2-CAF5-49F3-AC73-273074BBEE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:b2:*:*:*:*:*:*","matchCriteriaId":"F037EE61-50D6-4C1E-B24B-25A6D212E7E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:b3:*:*:*:*:*:*","matchCriteriaId":"5140F118-BC25-43CB-B19C-0885A44D6646"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.3:rc1:*:*:*:*:*:*","matchCriteriaId":"19ADAB10-BDD0-409E-93C2-9E7223464131"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.0:*:*:*:*:*:*:*","matchCriteriaId":"32CEF8AD-9EE7-4ADA-888E-883751962529"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F592D0F-095C-4F3B-97E7-E92C259D0CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F42F7AF7-D37C-4213-B2BC-D2B9FE725BDE"}]}]}],"references":[{"url":"http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33494","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33546","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33551","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33559","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33683","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33882","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:04.bind.asc","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-250846-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-045.htm","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0009","source":"secalert@redhat.com"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"secalert@redhat.com"},{"url":"http://www.openbsd.org/errata44.html#008_bind","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/500207/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/33151","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0043","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0366","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0904","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-2938","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10879","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5569","source":"secalert@redhat.com"},{"url":"https://www.isc.org/software/bind/advisories/cve-2009-0025","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00393.html","source":"secalert@redhat.com"},{"url":"http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=141879471518471&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:04.bind.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-250846-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-045.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata44.html#008_bind","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/500207/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/502322/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/33151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.isc.org/software/bind/advisories/cve-2009-0025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00393.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0046","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T18:30:01.453","lastModified":"2026-06-16T23:04:09.633","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Sun GridEngine 5.3 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"Sun GridEngine versión 5.3 y anteriores, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados mediante una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:grid_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3","matchCriteriaId":"2A4ACBF8-8D20-43CA-84FA-6E30EFBAF0AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:grid_engine:5.3:beta1:*:*:*:*:*:*","matchCriteriaId":"61B5F93D-E636-401A-8341-05565E7F798D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:grid_engine:5.3:beta2:*:*:*:*:*:*","matchCriteriaId":"DBB37AF4-2262-431F-B36A-31F96E0FCA83"}]}]}],"references":[{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0045","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0047","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T18:30:13.280","lastModified":"2026-06-16T23:04:09.750","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Gale 0.99 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"Gale versión 0.99 y anteriores, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados mediante una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:*:*:*:*:*:*:*:*","versionEndIncluding":"0.99","matchCriteriaId":"B7E884BE-3B56-4CC1-BE9B-2F4604AB8150"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.15:*:*:*:*:*:*:*","matchCriteriaId":"1287BEFC-BF7E-4C5C-AC50-22F3301C2DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.15b:*:*:*:*:*:*:*","matchCriteriaId":"88DD905A-4DFF-4EA1-96F2-894145916197"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.15c:*:*:*:*:*:*:*","matchCriteriaId":"E14E9CB4-55A5-4914-AA0B-79938149590A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.16:*:*:*:*:*:*:*","matchCriteriaId":"407DE223-5C67-4F10-8B98-750D1FBE4F18"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.16a:*:*:*:*:*:*:*","matchCriteriaId":"F93715E6-9528-4922-A049-119418DC7254"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.17:*:*:*:*:*:*:*","matchCriteriaId":"38BA200F-0BD1-48B1-A91F-26F0128FF4C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.17a:*:*:*:*:*:*:*","matchCriteriaId":"A5DCE57E-D944-4329-977B-12A76853D3F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.18:*:*:*:*:*:*:*","matchCriteriaId":"7A76AC49-2A31-404D-BE12-4B795B388116"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.18b:*:*:*:*:*:*:*","matchCriteriaId":"469CB01B-318D-407E-BB38-6B2F6AB4D3B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.18c:*:*:*:*:*:*:*","matchCriteriaId":"0D9EC778-2D17-4F1C-9DBE-74461A379EAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.19:*:*:*:*:*:*:*","matchCriteriaId":"B351A3DE-3D31-4B94-A1EA-04AFA98D00C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.19a:*:*:*:*:*:*:*","matchCriteriaId":"165C0D9D-D0A4-4ECF-B4F7-5A3E621F6B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.19b:*:*:*:*:*:*:*","matchCriteriaId":"921BA5E1-2469-42D3-8228-BC122C8CED39"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.20a:*:*:*:*:*:*:*","matchCriteriaId":"53F8F572-DE5A-45ED-8A90-B6C888026100"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.21:*:*:*:*:*:*:*","matchCriteriaId":"314A3314-5968-4F24-9958-E1997C20EF52"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.90a:*:*:*:*:*:*:*","matchCriteriaId":"B1A84B5B-8864-4E1C-95C1-18BCCCC8CFF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.90b:*:*:*:*:*:*:*","matchCriteriaId":"FCB50FB6-E388-4735-B0D5-0875479281E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.90c:*:*:*:*:*:*:*","matchCriteriaId":"F1090853-1367-4B94-BC3C-4CCFB5A43CA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.91:*:*:*:*:*:*:*","matchCriteriaId":"028853B7-2544-4010-A71F-D8CF78B01AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.91a:*:*:*:*:*:*:*","matchCriteriaId":"3C8B4AE9-0142-4405-8201-039A332A0EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gale:gale:0.91b:*:*:*:*:*:*:*","matchCriteriaId":"8C319A57-C69D-4786-9232-8E5278C03AD4"}]}]}],"references":[{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0046","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0048","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T18:30:15.827","lastModified":"2026-06-16T23:04:09.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenEvidence 1.0.6 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"OpenEvidence versión 1.0.6 y anteriores, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados por medio de una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openevidence:openevidence:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.6","matchCriteriaId":"B42046E9-EE96-4144-AF85-56D3F7DA9067"},{"vulnerable":true,"criteria":"cpe:2.3:a:openevidence:openevidence:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"38B2F54F-A344-4E6B-9404-76E50F047EAB"}]}]}],"references":[{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/0047","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-0049","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T18:30:15.843","lastModified":"2026-06-16T23:04:09.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Belgian eID middleware (eidlib) 2.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"Belgian eID middleware (eidlib) versión 2.6.0 y anteriores, no comprueba apropiadamente el valor devuelto de la función EVP_VerifyFinal de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados por medio de una firma de SSL/TLS malformada para las claves DSA y ECDSA, una vulnerabilidad similar a CVE-2008-5077."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eid:eidlib:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.0","matchCriteriaId":"97B6B61D-A6E5-4586-A799-66581D1E5109"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34029","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0050","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T18:30:15.860","lastModified":"2026-06-16T23:04:10.103","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"Lasso versión 2.2.1 y anteriores, no comprueba apropiadamente el valor devuelto de la función DSA_verify de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados mediante una firma de SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:entrouvert:lasso:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.1-0","matchCriteriaId":"47688EC4-E2DC-407D-8F2F-EDCFA685C4AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:entrouvert:lasso:1.9.9.0:*:*:*:*:*:*:*","matchCriteriaId":"4249DB70-1CB9-45F6-9E2B-476BF8DA3E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:entrouvert:lasso:2.0.0-1:*:*:*:*:*:*:*","matchCriteriaId":"62798EAF-07A6-49F3-8C9A-D90694AE32FD"}]}]}],"references":[{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47837","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0051","sourceIdentifier":"cve@mitre.org","published":"2009-01-07T18:30:15.890","lastModified":"2026-06-16T23:04:10.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ZXID 0.29 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"ZXID versión 0.29 y anteriores, no comprueba apropiadamente el valor devuelto de la función DSA_verify de OpenSSL, que permite a los atacantes remotos omitir la comprobación de la cadena de certificados por medio de una firma de SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:*:*:*:*:*:*:*:*","versionEndIncluding":"0.29","matchCriteriaId":"5FBF13B6-C08F-4B37-852A-CFA68C2493FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.1:*:*:*:*:*:*:*","matchCriteriaId":"3BEB522C-2349-4297-AF71-2263968BAEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.2:*:*:*:*:*:*:*","matchCriteriaId":"25720EAB-8656-45CB-983F-458782A44B6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.3:*:*:*:*:*:*:*","matchCriteriaId":"764ACFF4-BFD6-4FFE-81F3-30092E4023D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.4:*:*:*:*:*:*:*","matchCriteriaId":"4F8198CC-A1C6-49CB-B473-6C5CEF92BB05"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.5:*:*:*:*:*:*:*","matchCriteriaId":"20660655-9FD4-4264-A689-4D722B16661D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.6:*:*:*:*:*:*:*","matchCriteriaId":"E75A1370-596D-45A2-A4E2-218717498F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.7:*:*:*:*:*:*:*","matchCriteriaId":"255CCFCC-98B5-466F-9463-0E386C5B8FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.8:*:*:*:*:*:*:*","matchCriteriaId":"D3821FD3-3F2B-43F3-A089-94EE7F60BCFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.9:*:*:*:*:*:*:*","matchCriteriaId":"83DF2771-1B0E-4AB4-8F1C-32D6365B7A59"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.10:*:*:*:*:*:*:*","matchCriteriaId":"00C538E3-BF56-41A8-BD71-6988CF935505"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.11:*:*:*:*:*:*:*","matchCriteriaId":"47A7E3CA-8AC2-4382-8D77-325B1B12418C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.12:*:*:*:*:*:*:*","matchCriteriaId":"850DE94C-34DF-4C46-8383-2A544B71C5A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.13:*:*:*:*:*:*:*","matchCriteriaId":"F9D00FA7-822A-4743-84C2-7FA4F120F865"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.14:*:*:*:*:*:*:*","matchCriteriaId":"6AAC7BD0-7771-4511-BC69-7A9EB43A8139"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.15:*:*:*:*:*:*:*","matchCriteriaId":"14410832-E77B-4644-B561-B1158DD3BE22"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.16:*:*:*:*:*:*:*","matchCriteriaId":"037D3B59-2688-4A4E-A328-426B12F97684"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.17:*:*:*:*:*:*:*","matchCriteriaId":"F6A0E88B-09C6-4533-9409-9498E170C10E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.18:*:*:*:*:*:*:*","matchCriteriaId":"A6CAB4BF-2D00-461A-B906-547560CFA965"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.19:*:*:*:*:*:*:*","matchCriteriaId":"133EDD59-49D9-4FDC-8833-420F3E6B8211"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.20:*:*:*:*:*:*:*","matchCriteriaId":"11DD6C71-8661-44B4-98B9-71E5181D999D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.21:*:*:*:*:*:*:*","matchCriteriaId":"2596C783-B061-45A1-9C75-4A02FDF5D004"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.22:*:*:*:*:*:*:*","matchCriteriaId":"2590DB77-E5C0-4C5A-B1B3-6488F2EEC8E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.25:*:*:*:*:*:*:*","matchCriteriaId":"CA74ED53-DF05-46A6-9B76-80A9BB40CC57"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.26:*:*:*:*:*:*:*","matchCriteriaId":"C90A5D7D-A08B-46BF-A9A8-18EEADE63284"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.27:*:*:*:*:*:*:*","matchCriteriaId":"70E439D0-A0A9-417F-9DC4-C02BC52589C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zxid:zxid:0.28:*:*:*:*:*:*:*","matchCriteriaId":"39FD0D74-FC99-4E2A-BF8B-59B0A485575D"}]}]}],"references":[{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47837","source":"cve@mitre.org"},{"url":"http://www.ocert.org/advisories/ocert-2008-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/499827/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/47837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0124","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.530","lastModified":"2026-06-16T23:04:18.223","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The tqsl_verifyDataBlock function in openssl_cert.cpp in American Radio Relay League (ARRL) tqsllib 2.0 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"La función tqsl_verifyDataBlock en American Radio Relay League (ARRL) tqsllib v2.0 no comprueba adecuadamente el valor de retorno de la función OpenSSL EVP_VerifyFinal, lo que permitiría a atacantes remotos evitar la cadena de validación de certificado a través de una firma SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arrl:tqsllib:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C502AE9C-127A-4E16-A442-306C4FE00796"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511509","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33543","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479650","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00557.html","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00557.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0125","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.547","lastModified":"2026-06-16T23:04:18.350","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"NOTE: this issue has been disputed by the upstream vendor. nasl/nasl_crypto2.c in the Nessus Attack Scripting Language library (aka libnasl) 2.2.11 does not properly check the return value from the OpenSSL DSA_do_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  NOTE: the upstream vendor has disputed this issue, stating \"while we do misuse this function (this is a bug), it has absolutely no security ramification."},{"lang":"es","value":"** DISPUTADA ** NOTA: este problema ha sido disputado por el proveedor de origen. nasl/nasl_crypto2.c en la librería Nessus Attack Scripting Language (también conocida como libnasl) 2.2.11 no comprueba correctamente el valor de retorno de la función DSA_do_verify function de OpenSSL, lo que permite a atacantes remotos evadir la validación de una cadena de certificados a través de una firma SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077. NOTA: el proveedor de origen ha disputado este problema, diciendo que 'aunque hacemos un uso indebido de esta función (se trata de un bug), no tiene ninguna ramificación de seguridad.'"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:finkproject:libnasl:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E21F62BE-A2DD-4FAB-9745-8BB7B6AF255D"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511517","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://cvs.fedoraproject.org/viewvc/rpms/libnasl/F-10/libnasl.spec?r1=1.16&r2=1.17","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2009-January/002133.html","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479655","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://cvs.fedoraproject.org/viewvc/rpms/libnasl/F-10/libnasl.spec?r1=1.16&r2=1.17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2009-January/002133.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2009-0126","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.563","lastModified":"2026-06-16T23:04:18.487","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The decrypt_public function in lib/crypt.cpp in the client in Berkeley Open Infrastructure for Network Computing (BOINC) 6.2.14 and 6.4.5 does not check the return value from the OpenSSL RSA_public_decrypt function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"La función decrypt_public en lib/crypt.cpp en el cliente Berkeley Open Infrastructure for Network Computing (BOINC) v6.2.14 y v6.4.5, no comprueba adecuadamente el valor de retorno de la función OpenSSL RSA_public_decrypt, lo que permitiría a atacantes remotos evitar la validación en cadena de los certificados a través de una firma SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:berkeley:boinc_client:6.2.14:*:*:*:*:*:*:*","matchCriteriaId":"53F44CB8-229D-4295-AA10-818D4039B259"},{"vulnerable":true,"criteria":"cpe:2.3:a:berkeley:boinc_client:6.4.5:*:*:*:*:*:*:*","matchCriteriaId":"43504B16-DE5D-4D14-8B69-CDDD3125134C"}]}]}],"references":[{"url":"http://boinc.berkeley.edu/trac/changeset/16883","source":"cve@mitre.org"},{"url":"http://boinc.berkeley.edu/trac/ticket/823","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511521","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33806","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33828","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479664","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00034.html","source":"cve@mitre.org"},{"url":"http://boinc.berkeley.edu/trac/changeset/16883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://boinc.berkeley.edu/trac/ticket/823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00034.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0127","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.577","lastModified":"2026-06-16T23:04:18.620","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"M2Crypto does not properly check the return value from the OpenSSL EVP_VerifyFinal, DSA_verify, ECDSA_verify, DSA_do_verify, and ECDSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  NOTE: a Linux vendor disputes the relevance of this report to the M2Crypto product because \"these functions are not used anywhere in m2crypto."},{"lang":"es","value":"** CUESTIONADA ** M2Crypto no comprueba adecuadamente el valor de retorno de las funciones OpenSSL EVP_VerifyFinal, DSA_verify, ECDSA_verify, DSA_do_verify y ECDSA_do_verify, lo que permitiria a atacantes remotos evitar la validacion del certificado en cadena a traves de una firma SSL/TLS malformada, una vulnerabilidad similar a CVE-2008-5077. NOTE: Un fabricante de Linux cuestiona la relevancia de este informe en el producto M2Crypto debido a que \"esas funciones no se utilizan en ningun sitio de m2crypto\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:heikkitoivonen:m2crypto:-:*:*:*:*:*:*:*","matchCriteriaId":"0FDB41E1-9DB5-4F02-AAA3-8CB475EE073F"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511515","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479676","source":"cve@mitre.org","tags":["Exploit","Issue Tracking"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security issue.  M2Crypto provides python interfaces to multiple OpenSSL functions.  Neither of those interfaces is further used by M2Crypto in an insecure way.  Additionally, no application shipped in Red Hat Enterprise Linux is known to use affected interfaces provided by M2Crypto.\n\nFurther details can be found in the following bug report: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0127#c1","lastModified":"2009-01-21T00:00:00"}]}},{"cve":{"id":"CVE-2009-0128","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.610","lastModified":"2026-06-16T23:04:18.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"plugins/crypto/openssl/crypto_openssl.c in Simple Linux Utility for Resource Management (aka SLURM or slurm-llnl) does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"plugins/crypto/openssl/crypto_openssl.c en Simple Linux Utility for Resource Management (anteriormente conocido como SLURM o slurm-llnl) no comprueba adecuadamente los valores de retorno de la funcion OpenSSL EVP_VerifyFinal, lo que permite a atacantes remotos evitar la validacion de la cadena de certificados a traves de una firma SSL/TLS malformada, una vulneribilidad similar a CVE-2008-5077."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:llnl:slurm:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"0C7A3D60-1294-43AF-87BC-42885726B9B7"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511511","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0129","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.627","lastModified":"2026-06-16T23:04:18.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify and DSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077."},{"lang":"es","value":"libcrypt-openssl-dsa-perl no comprueba adecuadamente el valor de retorno de las funciones OpenSSL_DSA_verify y DSA_do_verify, lo que permitiria a atacantes remotos evitar la validacion de la cadena de certificados a traves de una firma SSL/TLS malformada, similar a la vulnerabilidad CVE-2008-5077."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl-openssl:libcrypt-openssl-dsa-perl:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"C330D871-2AA0-4722-93D0-D7010AF81701"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511519","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0130","sourceIdentifier":"cve@mitre.org","published":"2009-01-15T17:30:00.640","lastModified":"2026-06-16T23:04:18.963","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"lib/crypto/c_src/crypto_drv.c in erlang does not properly check the return value from the OpenSSL DSA_do_verify function, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  NOTE: a package maintainer disputes this issue, reporting that there is a proper check within the only code that uses the applicable part of crypto_drv.c, and thus \"this report is invalid."},{"lang":"es","value":"** CUESTIONADA ** lib/crypto/c_src/crypto_drv.c  en erlang no comprueba adecuadamente el retorno del valor de la función OpenSSL DSA_do_verify, esto permitiría a atacantes remotos eludir la validación de la cadena de certificados a través de una firma SSL/TLS, una vulnerabilidad similar a CVE-2008-5077. NOTA: Un desarrollador del paquete cuestiona los hechos, reportando que existe una comprobación adecuada dentro del unico codigo que utiliza la parte aplicable de crypto_drv.c, por lo que \"este informe es invalido\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-21T15:17:48.058982Z","id":"CVE-2009-0130","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:erlang:erlang:_nil_:*:*:*:*:*:*:*","matchCriteriaId":"37E9C67B-2EFC-457D-B426-92A10165C55F"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511520","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2009/01/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0265","sourceIdentifier":"cve@mitre.org","published":"2009-01-26T15:30:04.890","lastModified":"2026-06-16T23:04:37.180","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077 and CVE-2009-0025."},{"lang":"es","value":"Internet Systems Consortium (ISC) BIND en versiones 9.6.0 y anteriores no comprueba adecuadamente el valor de retorno de la función EVP_VerifyFinal de OpenSSL, lo cual permite a atacantes remotos eludir la validación del certificado a través de una firma SSL/TLS malformada, se trata de una vulnerabilidad similar a CVE-2008-5077 y CVE-2009-0025."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-252"},{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","versionEndIncluding":"9.6.0","matchCriteriaId":"3EFE1A82-B875-4840-A5C0-5A2189D73606"}]}]}],"references":[{"url":"http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/33559","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:037","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/0043","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.isc.org/node/373","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/33559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/0043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.isc.org/node/373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of BIND as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2009-01-26T00:00:00"}]}},{"cve":{"id":"CVE-2009-0653","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T19:30:00.280","lastModified":"2026-06-16T23:05:30.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970."},{"lang":"es","value":"OpenSSL, probablemente v0.9.6, no verifica las limitacion basicas para un certificado de autoridad certificadora intermedia, lo que permite a atacantes remotos falsificar lo certificados de sitios de confianza, a traves de un ataque de hombre en el medio, relacionada con CVE-2002-0970."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"}]}]}],"references":[{"url":"http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike","source":"cve@mitre.org"},{"url":"https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue was addressed in upstream OpenSSL prior to 0.9.6 and therefore does not affect the versions of OpenSSL as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.","lastModified":"2009-03-02T00:00:00"}]}},{"cve":{"id":"CVE-2009-0590","sourceIdentifier":"secalert@redhat.com","published":"2009-03-27T16:30:00.170","lastModified":"2026-06-16T23:05:22.323","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length."},{"lang":"es","value":"La función ASN1_STRING_print_ex en OpenSSL versiones anteriores a v0.9.8k permite a atacantes remotos provocar una denegación de servicio (acceso inválido a memoria y caída de la aplicación) mediante vectores que provocan la impresión de (1) BMPString o (2) UniversalString con una longitud de codificación inválida."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.8k","matchCriteriaId":"B334F9E9-BA5E-48D3-8461-A417DCF24E46"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34411","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34460","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34509","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34561","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34666","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34896","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34960","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35181","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35380","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42467","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1021905","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3865","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0057","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1763","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:087","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20090325.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52864","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.php.net/archive/2009.php#id2009-04-08-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502429/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/515055/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34256","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-750-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0019.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0850","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1020","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1175","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1220","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1548","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2010/3126","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49431","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=125017764422557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1021905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20090325.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.php.net/archive/2009.php#id2009-04-08-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/502429/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/515055/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/34256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-750-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2009/1548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2010/3126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}],"vendorComments":[{"organization":"Red Hat","comment":"This issue was fixed in openssl packages in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2009-1335.html\n\nThis issue was fixed in openssl packages in Red Hat Enterprise Linux 3 and 4 via: https://rhn.redhat.com/errata/RHSA-2010-0163.html","lastModified":"2010-03-25T00:00:00"}]}},{"cve":{"id":"CVE-2009-0591","sourceIdentifier":"secalert@redhat.com","published":"2009-03-27T16:30:01.920","lastModified":"2026-06-16T23:05:22.593","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote attackers to repudiate a signature that originally appeared to be valid but was actually invalid."},{"lang":"es","value":"La función CMS_verify en OpenSSL v0.9.8h hasta v0.9.8j, cuando se ha habilitado CMS, no maneja adecuadamente los errores asociados con atributos firmados malformados, permitiendo a atacantes remotos rechazar una firma que originalmente aparentaba ser válida pero que realmente será inválida."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34411","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34460","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34666","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35380","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36701","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1021907","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3865","source":"secalert@redhat.com"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openssl.org/news/secadv_20090325.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52865","source":"secalert@redhat.com"},{"url":"http://www.php.net/archive/2009.php#id2009-04-08-1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34256","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/0850","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1020","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1175","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1548","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49432","source":"secalert@redhat.com"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1021907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openssl.org/news/secadv_20090325.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/archive/2009.php#id2009-04-08-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/0850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue affected OpenSSL CMS functionality which is not present in the openssl packages as shipped with Red Hat Enterprise Linux 2.1, 3, 4 or 5.","lastModified":"2009-03-30T00:00:00"}]}},{"cve":{"id":"CVE-2009-0789","sourceIdentifier":"secalert@redhat.com","published":"2009-03-27T16:30:02.140","lastModified":"2026-06-16T23:05:49.017","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certificate, as demonstrated by an RSA public key."},{"lang":"es","value":"OpenSSL anterior a v0.9.8k en plataformas WIN64 y otras plataformas no maneja adecuadamente una estructura ASN.1 malformada, permitiendo a atacantes remotos provocar una denegación de servicio (acceso de memoria inválido y caída de la aplicación) al poner esta estructura en la clave pública de un certificado, como la utilizada por una clave pública RSA."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8j","matchCriteriaId":"B2328F75-7F29-4516-B702-5F3AD9B5603D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/34411","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34460","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34666","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35065","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35380","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021906","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3865","source":"secalert@redhat.com"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20090325.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52866","source":"secalert@redhat.com"},{"url":"http://www.php.net/archive/2009.php#id2009-04-08-1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/34256","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0850","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1020","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1175","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1548","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49433","source":"secalert@redhat.com"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=124464882609472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/34666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1021906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20090325.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/52866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/archive/2009.php#id2009-04-08-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/0850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue only affects a small number of operating systems and does not affect the openssl packages as shipped with Red Hat Enterprise Linux 2.1, 3, 4 or 5.","lastModified":"2009-03-30T00:00:00"}]}},{"cve":{"id":"CVE-2009-0161","sourceIdentifier":"cve@mitre.org","published":"2009-05-13T15:30:00.500","lastModified":"2026-06-16T23:04:23.887","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP certificate validation, which might allow remote attackers to spoof certificate authentication via a revoked certificate."},{"lang":"es","value":"El módulo OpenSSL::OCSP de Ruby en Apple Mac OS X v10.5 anterior a v10.5.7 malinterpreta una respuesta no válida no especificada como un certificado de validación OCSP válido, lo que podría permitir a atacantes remotos falsear certificados de autenticación a través de un certificado revocados"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DC90AA12-DD17-4607-90CB-E342E83F20BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3E721C-00CA-4D51-B542-F2BC5C0D65BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B3267A41-1AE0-48B8-BD1F-DEC8A212851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"855288F1-0242-4951-AB3F-B7AF13E21CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"10082781-B93E-4B84-94F2-FA9749B4D92B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*","matchCriteriaId":"AE1EBF04-C440-4A6B-93F2-DC3A812728C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"DFB077A2-927B-43AF-BFD5-0E78648C9394"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C7817232-BE3E-4655-8282-A979E5D40D3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*","matchCriteriaId":"77E8D614-E1EE-42F1-9E55-EA54FB500621"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C73BED9E-29FB-4965-B38F-013FFE5A9170"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D3B7DEC3-1C0B-4D13-98CD-CB7FAE7933B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7723A9E8-1DE2-4C7D-81E6-4F79DCB09324"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*","matchCriteriaId":"8EC681A4-6F58-4C7D-B4E0-FCC1BCBC534E"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50592","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1252","sourceIdentifier":"cve@mitre.org","published":"2009-05-19T19:30:00.670","lastModified":"2026-06-16T23:06:51.997","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función crypto_recv en ntp_crypto.c en ntpd en NTP anteriores a v4.2.4p7 y v4.2.5 anterior a v4.2.5p74, cuando OpenSSL y autokey están activados, permite a atacantes remotos ejecutar código de forma arbitraria a través de paquetes manipulados que contienen un campo de extension."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p0:*:*:*:*:*:*:*","matchCriteriaId":"AA843BCD-372A-42F5-A8C0-1AD32FA9E94C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p1:*:*:*:*:*:*:*","matchCriteriaId":"B980A178-2958-4B36-8AD8-3932B12C5A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p2:*:*:*:*:*:*:*","matchCriteriaId":"5D65210A-F80E-4019-91DA-49838369E03F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p3:*:*:*:*:*:*:*","matchCriteriaId":"29FAB224-3493-4273-A655-10BE44F5B5BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p4:*:*:*:*:*:*:*","matchCriteriaId":"093F0DD2-9E88-4138-AFF5-69105E7F2C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p5:*:*:*:*:*:*:*","matchCriteriaId":"B3590927-E242-411D-822A-33337D6B8A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.4p6:*:*:*:*:*:*:*","matchCriteriaId":"20FCD55C-D4A8-4544-81AF-C920B3B48A2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p0:*:*:*:*:*:*:*","matchCriteriaId":"881ED983-01B5-4A02-B671-8744EC0E1904"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p1:*:*:*:*:*:*:*","matchCriteriaId":"A3897870-1724-4018-8F77-122548022535"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p2:*:*:*:*:*:*:*","matchCriteriaId":"7012720C-D4BD-40C5-8521-6859BE46DDDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p3:*:*:*:*:*:*:*","matchCriteriaId":"E8474ADA-F2A8-494D-BB6F-6EA4D4B865B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p4:*:*:*:*:*:*:*","matchCriteriaId":"9FFC396E-2E5C-4576-94D3-96C619523CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p5:*:*:*:*:*:*:*","matchCriteriaId":"19F55042-5CA1-453E-A786-A8B346C02BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p6:*:*:*:*:*:*:*","matchCriteriaId":"A3C5930E-7792-4940-9EC3-CD5AE78D51B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p7:*:*:*:*:*:*:*","matchCriteriaId":"87004177-C6F2-4057-919D-20D91D01A8B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p8:*:*:*:*:*:*:*","matchCriteriaId":"E01570E4-447A-4F60-BD5C-40D201A464F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p9:*:*:*:*:*:*:*","matchCriteriaId":"440B4315-C7B3-4930-BD4D-B55BD3EEEE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p10:*:*:*:*:*:*:*","matchCriteriaId":"760050D5-5F8E-41CE-98DA-31E5BFB8A6C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p11:*:*:*:*:*:*:*","matchCriteriaId":"96E4FED4-A7F0-44C0-9405-1AB07D9B0079"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p12:*:*:*:*:*:*:*","matchCriteriaId":"78977FE3-FF1E-47CA-9B97-3E6EC18894B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p13:*:*:*:*:*:*:*","matchCriteriaId":"11E24A99-575E-42EB-9463-29021A33C914"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p14:*:*:*:*:*:*:*","matchCriteriaId":"CBB88D29-930C-4552-889D-4DBF23EC3760"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p15:*:*:*:*:*:*:*","matchCriteriaId":"E13EE5C4-594E-4004-A8BC-AD4D3608FF35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p16:*:*:*:*:*:*:*","matchCriteriaId":"16009504-A8ED-43E9-A7F9-E8E1628449BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p17:*:*:*:*:*:*:*","matchCriteriaId":"5A4A86DA-E8CB-44B5-9E7D-A69A149FAF8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p18:*:*:*:*:*:*:*","matchCriteriaId":"A0F918DA-D4F3-4016-861E-78A8A00F9FEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p19:*:*:*:*:*:*:*","matchCriteriaId":"DD908ABD-5A18-436B-830B-7F252E22B3CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p20:*:*:*:*:*:*:*","matchCriteriaId":"E8152815-3510-4FE7-A8B9-51EB857D7262"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p21:*:*:*:*:*:*:*","matchCriteriaId":"C03D4FCB-A0CE-45EA-80FC-523F388E51A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p23:*:*:*:*:*:*:*","matchCriteriaId":"86CBFD14-8B03-4F0D-8B0F-670629334D17"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p24:*:*:*:*:*:*:*","matchCriteriaId":"656E046B-C3F2-4DD5-B3C2-C60ACEBC808C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p25:*:*:*:*:*:*:*","matchCriteriaId":"014A6026-C4B9-4E09-9170-059D1FD8D95A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p26:*:*:*:*:*:*:*","matchCriteriaId":"51BAB21E-C818-492A-A537-EFDF57E412EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p27:*:*:*:*:*:*:*","matchCriteriaId":"92CACCD1-DF24-4226-A891-6FD7EBB0E57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p28:*:*:*:*:*:*:*","matchCriteriaId":"824DE9A3-5ABF-4E9F-985D-0633893CAECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p29:*:*:*:*:*:*:*","matchCriteriaId":"8A27E0EA-38B8-49F0-818B-BB4CAA7EF7B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p30:*:*:*:*:*:*:*","matchCriteriaId":"8347419F-6B7F-4BA6-B03C-3A52E5F7148C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p31:*:*:*:*:*:*:*","matchCriteriaId":"23D73277-B636-4F50-88F0-A79278EB6AA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p32:*:*:*:*:*:*:*","matchCriteriaId":"4701E3A4-FE51-4A48-8ABB-67DFE815BBFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p33:*:*:*:*:*:*:*","matchCriteriaId":"3A2E5F24-1242-4819-8787-4F2EB9E97C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p35:*:*:*:*:*:*:*","matchCriteriaId":"DD55122C-2983-4193-BC46-6269A348EC5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p36:*:*:*:*:*:*:*","matchCriteriaId":"D4199168-912C-4702-801C-A36394ED494B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p37:*:*:*:*:*:*:*","matchCriteriaId":"3D89067A-7F24-458A-AD6F-ADFB92C24F93"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p38:*:*:*:*:*:*:*","matchCriteriaId":"362FDB7C-EA5E-480D-96FB-2BCEF7F4E64A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p39:*:*:*:*:*:*:*","matchCriteriaId":"DC3E2B20-E6B7-47DB-8A02-CAAF6C2B1597"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p40:*:*:*:*:*:*:*","matchCriteriaId":"98F3B4EA-053B-4A25-88F8-A788F88488A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p41:*:*:*:*:*:*:*","matchCriteriaId":"24B31D93-005E-498A-8935-EC31DC104B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p42:*:*:*:*:*:*:*","matchCriteriaId":"125D14D2-3443-46E6-AC58-967683604B2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p43:*:*:*:*:*:*:*","matchCriteriaId":"E2969C79-0B8F-4759-9978-7432BA388ADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p44:*:*:*:*:*:*:*","matchCriteriaId":"485E789D-B602-477E-BD10-0054AEE98D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p45:*:*:*:*:*:*:*","matchCriteriaId":"83284150-1E06-45B0-BD75-7BE895EB99B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p46:*:*:*:*:*:*:*","matchCriteriaId":"3298B973-D08A-44A6-AD60-0E18A9FF55AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p47:*:*:*:*:*:*:*","matchCriteriaId":"06314717-CF64-4269-A049-F70396CA000A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p48:*:*:*:*:*:*:*","matchCriteriaId":"EF909823-66E7-49AE-9385-DCDA7CD5EB51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p49:*:*:*:*:*:*:*","matchCriteriaId":"A4FE8C8E-6051-4DB8-B03B-6EF211992545"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p50:*:*:*:*:*:*:*","matchCriteriaId":"E1FF094E-49CA-41BB-A568-2BA49D770270"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p51:*:*:*:*:*:*:*","matchCriteriaId":"AE0D9B6F-3838-40ED-9998-89E66EEA79EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p52:*:*:*:*:*:*:*","matchCriteriaId":"8076E3B3-57DA-425A-9CBD-426ADE3735F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p53:*:*:*:*:*:*:*","matchCriteriaId":"E66A89E0-B31A-4469-859C-6C323399A706"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p54:*:*:*:*:*:*:*","matchCriteriaId":"6813F72B-4D8B-4903-BCB7-5A0EDE288B93"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p55:*:*:*:*:*:*:*","matchCriteriaId":"2F8F957C-632F-4E5D-82E3-B3DF6572C924"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p56:*:*:*:*:*:*:*","matchCriteriaId":"0DC1DBF1-C2EE-4241-A50F-40E837B84C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p57:*:*:*:*:*:*:*","matchCriteriaId":"A7826192-660B-49AC-B1B8-BD799712DF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p58:*:*:*:*:*:*:*","matchCriteriaId":"3443D451-1845-4440-AFB8-D6432585CBF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p59:*:*:*:*:*:*:*","matchCriteriaId":"88C81B35-94C8-4881-B2FA-AF8214AAEBF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p60:*:*:*:*:*:*:*","matchCriteriaId":"7D3BDB8B-21E7-45EB-B39A-8822B64196ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p61:*:*:*:*:*:*:*","matchCriteriaId":"808929AC-EC57-49FF-9FCC-FE593743EE6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p62:*:*:*:*:*:*:*","matchCriteriaId":"28C8CE4D-6C53-490E-8223-A6A4EEEA2CCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p63:*:*:*:*:*:*:*","matchCriteriaId":"C49B2C1E-5653-4DA9-96A1-8E84A0AAB95E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p64:*:*:*:*:*:*:*","matchCriteriaId":"6DCD5198-26B4-4334-8077-916EA21F0760"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p65:*:*:*:*:*:*:*","matchCriteriaId":"AD533741-97B8-4726-A7C4-4B7D0723817E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p66:*:*:*:*:*:*:*","matchCriteriaId":"0336E989-FB7F-49CC-9FC9-F10B5C6716CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p67:*:*:*:*:*:*:*","matchCriteriaId":"1CD72509-2E02-4C18-8AB1-7FAB7016EB34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p68:*:*:*:*:*:*:*","matchCriteriaId":"EFD88BB1-C82A-4021-BEA3-40B23CA2A5CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p69:*:*:*:*:*:*:*","matchCriteriaId":"79740F38-3210-4AF2-80C7-692DA5C5E315"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p70:*:*:*:*:*:*:*","matchCriteriaId":"7A1FB0C1-3A68-41A3-9290-1CAA09042716"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p71:*:*:*:*:*:*:*","matchCriteriaId":"4CA193DE-E94C-4229-8FBC-1E35884F310B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:4.2.5p73:*:*:*:*:*:*:*","matchCriteriaId":"C76D8727-2324-4A2B-B73A-99E452FD07E4"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1039.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1040.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/35137","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35138","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35166","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35169","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35243","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35253","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35308","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35336","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35388","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35416","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35630","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37470","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37471","source":"cve@mitre.org"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:11.ntpd.asc","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0092","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2009/dsa-1801","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/853097","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:117","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/35017","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1022243","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/1361","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499694","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://launchpad.net/bugs/cve/2009-1252","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11231","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6307","source":"cve@mitre.org"},{"url":"https://support.ntp.org/bugs/show_bug.cgi?id=1151","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/777-1/","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00293.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-006.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1039.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/35137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.freebsd.org/advisories/FreeBSD-SA-09:11.ntpd.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.566238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2009/dsa-1801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200905-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/853097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://launchpad.net/bugs/cve/2009-1252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.ntp.org/bugs/show_bug.cgi?id=1151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/777-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00293.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01414.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01449.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1377","sourceIdentifier":"secalert@redhat.com","published":"2009-05-19T19:30:00.733","lastModified":"2026-06-16T23:07:09.170","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of \"future epoch\" DTLS records that are buffered in a queue, aka \"DTLS record buffer limitation bug.\""},{"lang":"es","value":"La función dtls1_buffer_record en ssl/d1_pkt.c en OpenSSL 0.9.8k y anteriores permite a atacantes remotos producir una denegación de servicio (consumo de memoria) a través de series largas de registros DTLS de \"eras futuras\" que se almacenan en búfer en una cola, también conocido como \"fallo de limitación de la grabación de búfer DTLS\""}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"0.9.8","versionEndExcluding":"0.9.8m","matchCriteriaId":"EA054F35-6E05-4A24-9195-F80C0C2761DC"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=18187","source":"secalert@redhat.com","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=openssl-dev&m=124247675613888&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest","source":"secalert@redhat.com","tags":["Broken Link","Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35128","source":"secalert@redhat.com","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35461","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37003","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38761","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:120","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/18/1","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35001","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022241","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1377","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://launchpad.net/bugs/cve/2009-1377","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=18187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=openssl-dev&m=124247675613888&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/18/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://launchpad.net/bugs/cve/2009-1377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nThis issue was addressed for Red Hat Enterprise Linux 5 \nby http://rhn.redhat.com/errata/RHSA-2009-1335.html\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments.  There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.","lastModified":"2009-09-02T00:00:00"}]}},{"cve":{"id":"CVE-2009-1378","sourceIdentifier":"secalert@redhat.com","published":"2009-05-19T19:30:00.750","lastModified":"2026-06-16T23:07:09.373","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka \"DTLS fragment handling memory leak.\""},{"lang":"es","value":"Múltiples fugas de memoria en la función dtls1_process_out_of_seq_message en ssl/d1_both.c en OpenSSL v0.9.8k y anteriores permite a atacantes remotos producir una denegación de servicio (consumo de memoria) a través de registros DTLS que (1) son duplicados o (2) tienen una secuencia de números mucho mayor que la actual secuencia de números, conocido también como \"fuga de memoria en el manejo de fragmentos DTLS\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartExcluding":"0.9.8","versionEndExcluding":"0.9.8m","matchCriteriaId":"5DC47E9C-E7B1-4EF7-AAEE-7D7746544D47"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=18188","source":"secalert@redhat.com","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=openssl-dev&m=124247679213944&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=openssl-dev&m=124263491424212&w=2","source":"secalert@redhat.com","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35128","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35461","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37003","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38761","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:120","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/18/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35001","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022241","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1377","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://launchpad.net/bugs/cve/2009-1378","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11309","source":"secalert@redhat.com","tags":["Broken Link","Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7229","source":"secalert@redhat.com","tags":["Broken Link","Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/8720","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=18188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=openssl-dev&m=124247679213944&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=openssl-dev&m=124263491424212&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.openwall.com/lists/oss-security/2009/05/18/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1022241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://launchpad.net/bugs/cve/2009-1378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/8720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nThis issue was addressed for Red Hat Enterprise Linux 5 \nby http://rhn.redhat.com/errata/RHSA-2009-1335.html\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments.  There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.\n","lastModified":"2009-09-02T00:00:00"}]}},{"cve":{"id":"CVE-2009-1379","sourceIdentifier":"secalert@redhat.com","published":"2009-05-19T19:30:00.780","lastModified":"2026-06-16T23:07:09.587","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate."},{"lang":"es","value":"Vulnerabilidad de uso después de la liberación en (use-after-free) en la función dtls1_retrieve_buffered_fragment en ssl/d1_both.c en OpenSSL v1.0.0 Beta 2 permite a atacantes remotos producir una denegación de servicio (caída de openssl s_client) a posiblemente tenga un impacto sin especificar a través de un paquete DTLS, como se demostró mediante un paquete de un servidor que utiliza un certificado de servidor manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com"},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1923&user=guest&pass=guest","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35416","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35461","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35571","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36533","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37003","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38761","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"secalert@redhat.com"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/18/4","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/35138","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1022241","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1377","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50661","source":"secalert@redhat.com"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com"},{"url":"https://launchpad.net/bugs/cve/2009-1379","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6848","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9744","source":"secalert@redhat.com"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1923&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/35416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/05/18/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/35138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/cve/2009-1379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9744","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nThis issue was addressed for Red Hat Enterprise Linux 5 \nby http://rhn.redhat.com/errata/RHSA-2009-1335.html\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments.  There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.\n","lastModified":"2009-09-02T00:00:00"}]}},{"cve":{"id":"CVE-2009-1386","sourceIdentifier":"secalert@redhat.com","published":"2009-06-04T16:30:00.313","lastModified":"2026-06-16T23:07:10.527","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello."},{"lang":"es","value":"ssl/s3_pkt.c en OpenSSL anteriores a v0.9.8i permite a los atacantes remotos, causar una denegación de servicios (puntero NULO desreferenciado y caída del \"daemon\"), a través de un paquete ChangeCipherSpec DTLs que ocurre antes de ClientHello."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartExcluding":"0.9.8","versionEndExcluding":"0.9.8i","matchCriteriaId":"CD28B423-FF29-4983-9FBD-68641B1C142A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*","matchCriteriaId":"2B8C80A1-D1E7-42D4-8DBC-CB7637D7598E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*","matchCriteriaId":"3EB3990A-3457-4CD6-9EEC-F2D4BC143932"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:*:*:*:*:*:*","matchCriteriaId":"06110A61-8857-46D5-BEE1-882197756DED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=17369","source":"secalert@redhat.com","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1679&user=guest&pass=guest","source":"secalert@redhat.com","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/02/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35174","source":"secalert@redhat.com","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50963","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11179","source":"secalert@redhat.com","tags":["Broken Link","Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7469","source":"secalert@redhat.com","tags":["Broken Link","Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/8873","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=17369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1679&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/02/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/35174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Tool Signature"]},{"url":"https://www.exploit-db.com/exploits/8873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2009-1387","sourceIdentifier":"secalert@redhat.com","published":"2009-06-04T16:30:00.343","lastModified":"2026-06-16T23:07:10.690","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a \"fragment bug.\""},{"lang":"es","value":"La función dtls1_retrieve_buffered_fragment en ssl/d1_both.c en OpenSSL anteriores a v1.0.0 Beta 2 permite a los atacantes causar una denegación de servicios (puntero NULO desreferenciado y caída de \"daemon\") a través de un mensaje \"handshake\" DTLS fuera de secuencia, relativo a \"fragment bug\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"0.9.8","versionEndExcluding":"0.9.8m","matchCriteriaId":"EA054F35-6E05-4A24-9195-F80C0C2761DC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*","matchCriteriaId":"2B8C80A1-D1E7-42D4-8DBC-CB7637D7598E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*","matchCriteriaId":"3EB3990A-3457-4CD6-9EEC-F2D4BC143932"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:*:*:*:*:*:*","matchCriteriaId":"06110A61-8857-46D5-BEE1-882197756DED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=17958","source":"secalert@redhat.com","tags":["Broken Link","Patch","Third Party Advisory","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest","source":"secalert@redhat.com","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37003","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/02/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=17958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.vmware.com/pipermail/security-announce/2010/000082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/35571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/02/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-792-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]}]}},{"cve":{"id":"CVE-2009-1390","sourceIdentifier":"secalert@redhat.com","published":"2009-06-16T21:00:00.343","lastModified":"2026-06-16T23:07:11.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows remote attackers to spoof trusted servers via a man-in-the-middle attack."},{"lang":"es","value":"Mutt v1.5.º9, enlazado contra (1) OpenSSL (mutt_ssl.c) o (2) GnuTLS (mutt_ssl_gnutls.c), permite conexiones cuando se acepta un certificado TLS en la cadena en vez de verificar esta última, lo que permite a atacantes remotos suplantar servidores de confianda a través de un ataque hombre-en-medio(Man-in-the-middle)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.5.19:*:*:*:*:*:*:*","matchCriteriaId":"89C33B31-B9BC-4E43-8221-219380B4B682"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","matchCriteriaId":"DDA1CA86-1405-4C25-9BC2-5A5E6A76B911"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*","matchCriteriaId":"2745A1E0-C586-4686-A5AC-C82ABE726D5C"}]}]}],"references":[{"url":"http://dev.mutt.org/hg/mutt/rev/64bf199c8d8a","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://dev.mutt.org/hg/mutt/rev/8f11dd00c770","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/10/2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35288","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51068","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00715.html","source":"secalert@redhat.com"},{"url":"http://dev.mutt.org/hg/mutt/rev/64bf199c8d8a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://dev.mutt.org/hg/mutt/rev/8f11dd00c770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.openwall.com/lists/oss-security/2009/06/10/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/35288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00715.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of mutt as shipped with Red Hat Enterprise Linux 3, 4, or 5.  Only mutt version 1.5.19 was affected by this flaw.","lastModified":"2009-06-17T00:00:00"}]}},{"cve":{"id":"CVE-2009-2409","sourceIdentifier":"secalert@redhat.com","published":"2009-07-30T19:30:00.343","lastModified":"2026-06-16T23:09:23.170","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time.  NOTE: the scope of this issue is currently limited because the amount of computation required is still large."},{"lang":"es","value":"La librería Network Security Services (NSS) en versiones anteriores a 3.12.3, como se utiliza en Firefox; GnuTLS en versiones anteriores a 2.6.4 y 2.7.4; OpenSSL 0.9.8 hasta la versión 0.9.8k; y otros productos que soportan MD2 con certificados X.509, lo que podrían permitir a atacantes remotos falsificar certificados usando defectos de diseño de MD2 para generar una colisión de hash en menos que tiempo que con fuerza bruta. NOTA: el alcance de este problema está actualmente limitado porque la cantidad de computación requerida es todavía grande."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","baseScore":5.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.4","matchCriteriaId":"3306EB88-CE4C-4D5E-BE35-53DE6DEC5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*","versionStartIncluding":"2.7.0","versionEndExcluding":"2.7.4","matchCriteriaId":"66221847-4F1D-4F26-8916-731BDFE5B3A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*","versionEndExcluding":"3.12.3","matchCriteriaId":"A21F310D-7D9F-45D7-974D-C615F99FBEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"0.9.8","versionEndIncluding":"0.9.8k","matchCriteriaId":"06458D9A-4AB2-4B8A-8902-D2A285801347"}]}]}],"references":[{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36139","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36157","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36434","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36669","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/36739","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/37386","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42467","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1874","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:258","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1207.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/515055/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1022631","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-810-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0019.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2085","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3126","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/810-2/","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.debian.org/security/2009/dsa-1888","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://java.sun.com/j2se/1.5.0/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://java.sun.com/javase/6/webnotes/6u17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/36739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/37386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-200911-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1207.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1432.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/515055/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1022631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-810-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/810-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.debian.org/security/2009/dsa-1888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-2417","sourceIdentifier":"secalert@redhat.com","published":"2009-08-14T15:16:27.390","lastModified":"2026-06-16T23:09:24.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"lib/ssluse.c en cURL y libcurl v7.4 hasta v7.19.5, cuando se usa OpenSSL, no maneja de forma aecuada el caracter '\\0' en un nombre de dominio en el campo sujeto del Common Name (CN) de un certificado X.509, lo que permite a atacantes de hombre en el medio hacer un spoofing de servidores SSL a través de la un certificado de una autoridad de Certificación legítima, manipulado, relativo a CVE_2009-2408."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.4:*:*:*:*:*:*:*","matchCriteriaId":"2A4F46D5-85E5-4483-AD3D-207E9121FE3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7C3A6114-AA64-45E0-99D7-FAB060B8657B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"DCCF67A1-874A-41A3-85C9-2BDCD193CE22"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.5:*:*:*:*:*:*:*","matchCriteriaId":"4321D25E-27DE-4649-A9B7-C6295F05ABB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.5.1:*:*:*:*:*:*:*","matchCriteriaId":"25774954-E239-4337-9931-D4F6A69B42F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"2A000CAB-5986-4568-96C2-B7E213C77E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.6:*:*:*:*:*:*:*","matchCriteriaId":"37C5745B-2FFF-4DF8-883B-417015BDDF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"76A50325-2247-46EF-A991-70378C4D008F"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.7:*:*:*:*:*:*:*","matchCriteriaId":"B58D1562-5A17-4124-8010-6098A204C898"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C461E700-752D-4A31-A3A4-2B758CE07704"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.7.2:*:*:*:*:*:*:*","matchCriteriaId":"AD8B6BE8-BC9A-443D-B6C8-4B5FF2390306"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.7.3:*:*:*:*:*:*:*","matchCriteriaId":"83681317-F32A-4C73-915A-D431E8DF944C"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.8:*:*:*:*:*:*:*","matchCriteriaId":"F9D9C492-5F87-4149-ACAE-948DBE35E40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.8.1:*:*:*:*:*:*:*","matchCriteriaId":"70655CE0-63F0-402C-B335-FCFA494335C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9:*:*:*:*:*:*:*","matchCriteriaId":"5F6A6A05-E568-46F2-B2F5-73300E4EA5BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9.1:*:*:*:*:*:*:*","matchCriteriaId":"F102275D-8116-4F65-8910-478CB8DAAE76"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D68C14C1-AFDF-4DE7-BD06-2A7FE079656D"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6BD860AC-DE24-4CD5-B2C9-C77BD95AAFD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9.5:*:*:*:*:*:*:*","matchCriteriaId":"403DDE56-5FA7-4920-A905-30349E61361B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9.6:*:*:*:*:*:*:*","matchCriteriaId":"F001A45E-CFD8-4B41-9281-F01A284ECD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9.7:*:*:*:*:*:*:*","matchCriteriaId":"580BAB7A-3BE0-4FA1-9CAF-124F16882518"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.9.8:*:*:*:*:*:*:*","matchCriteriaId":"21AE58E9-F201-41AA-A1DC-9EB09E50459A"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10:*:*:*:*:*:*:*","matchCriteriaId":"C901C070-728C-41CD-8E4F-ECCB779906C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.1:*:*:*:*:*:*:*","matchCriteriaId":"97A1D7EA-6567-4A48-A431-EA28508D62C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.2:*:*:*:*:*:*:*","matchCriteriaId":"C6D8F50B-495E-48B3-BF9F-8E4ACA556B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.3:*:*:*:*:*:*:*","matchCriteriaId":"00F4FFF6-6AB4-4857-BDFA-12801C972708"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.4:*:*:*:*:*:*:*","matchCriteriaId":"E9987313-0256-4837-B347-6ABEF18DFCBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.5:*:*:*:*:*:*:*","matchCriteriaId":"D703855E-6610-445D-B498-61CE1C763A9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.6:*:*:*:*:*:*:*","matchCriteriaId":"AA7B64A2-6779-4A01-9864-902E2C04B08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.7:*:*:*:*:*:*:*","matchCriteriaId":"A07B1635-6F28-4ED4-A2AC-CD7E9549C920"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.10.8:*:*:*:*:*:*:*","matchCriteriaId":"BFA4392F-2582-4EFE-9450-3F12588BE981"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.11.0:*:*:*:*:*:*:*","matchCriteriaId":"53E91EAD-3813-498B-9B5C-05F1DCF75D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.11.1:*:*:*:*:*:*:*","matchCriteriaId":"6CDDBC13-1646-490B-B778-DBD3BB3208C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.11.2:*:*:*:*:*:*:*","matchCriteriaId":"6B87F05D-C077-4929-8BBA-A7287A816470"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.12:*:*:*:*:*:*:*","matchCriteriaId":"3DEC85E8-5555-46A9-9A95-30E1497AFA09"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.12.0:*:*:*:*:*:*:*","matchCriteriaId":"8CA22553-089B-44D2-B545-82F7AED74E25"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.12.1:*:*:*:*:*:*:*","matchCriteriaId":"03060364-7DCD-4111-BF7A-BEF6AFCB3134"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.12.2:*:*:*:*:*:*:*","matchCriteriaId":"319DADFB-081B-46AA-9F7D-DD4D1C5BE26D"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.12.3:*:*:*:*:*:*:*","matchCriteriaId":"3D9C6906-5FBD-4736-87B6-720E288E394A"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.13:*:*:*:*:*:*:*","matchCriteriaId":"4931FF86-51B6-470A-A2E0-A1B0942D1CF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.13.1:*:*:*:*:*:*:*","matchCriteriaId":"FA9DA33F-A33E-483E-AE4D-4422D62C02E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.13.2:*:*:*:*:*:*:*","matchCriteriaId":"F5028DB2-87D5-4AD8-87D4-325C519D6CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.14:*:*:*:*:*:*:*","matchCriteriaId":"E992CDB0-A787-4F7E-AC55-13FE7C68A1D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.14.1:*:*:*:*:*:*:*","matchCriteriaId":"808143C5-108B-45BE-B626-A44F9F956018"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.15:*:*:*:*:*:*:*","matchCriteriaId":"8EBBB3F1-98BD-40D1-B09F-1924D567625A"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.15.1:*:*:*:*:*:*:*","matchCriteriaId":"88D5DAE5-ABEA-4FF1-836C-BA4741F13323"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.15.2:*:*:*:*:*:*:*","matchCriteriaId":"7E15191F-D4E6-425C-81BE-2CD55A815B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.15.3:*:*:*:*:*:*:*","matchCriteriaId":"0407CCC0-ACAA-4B2A-99A5-DA57791057B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.16.3:*:*:*:*:*:*:*","matchCriteriaId":"248D86F7-A8E5-448D-A55A-C05278BB9822"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.17.0:*:*:*:*:*:*:*","matchCriteriaId":"295EE8FF-18BD-4F67-9045-83A5693AB783"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.17.1:*:*:*:*:*:*:*","matchCriteriaId":"249C50ED-B681-4DFB-83CD-625D703CD95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.18.0:*:*:*:*:*:*:*","matchCriteriaId":"F3F060A3-FC8E-45CD-85AB-247D13A2896C"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.18.1:*:*:*:*:*:*:*","matchCriteriaId":"F14BB81D-841D-456C-9CAE-CC679FFAB5E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.18.2:*:*:*:*:*:*:*","matchCriteriaId":"6EBA081D-AB88-4895-8495-6B51EB6B5325"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.19.0:*:*:*:*:*:*:*","matchCriteriaId":"F8F6B4C1-B88F-4675-BAB7-66A4DFAC17AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.19.1:*:*:*:*:*:*:*","matchCriteriaId":"A44CE5AD-27B6-45EB-A0B8-CF9BDB31F0E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.19.2:*:*:*:*:*:*:*","matchCriteriaId":"63984E6B-54EF-4DD6-8A5B-DD16A9A6A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.19.3:*:*:*:*:*:*:*","matchCriteriaId":"EBACF741-C988-4800-A9FF-E4836A1EE4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.19.4:*:*:*:*:*:*:*","matchCriteriaId":"95C5A868-2EC9-4FC6-A074-E587A203A350"},{"vulnerable":true,"criteria":"cpe:2.3:a:curl:libcurl:7.19.5:*:*:*:*:*:*:*","matchCriteriaId":"54613E59-4583-405C-9BA3-609D47B9FFEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.12:*:*:*:*:*:*:*","matchCriteriaId":"4F7DE39A-325D-42F5-B4ED-C971725232DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.12.1:*:*:*:*:*:*:*","matchCriteriaId":"0DEC10D0-622A-4037-9D4A-69814226CC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.12.2:*:*:*:*:*:*:*","matchCriteriaId":"B9D0343C-175D-44BA-BCCF-5F204C749EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.12.3:*:*:*:*:*:*:*","matchCriteriaId":"69D4C0FC-6848-4D18-98E8-4A2F4D7BECC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.13:*:*:*:*:*:*:*","matchCriteriaId":"4E66EA58-F408-4D8B-9614-67B936B0F1FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.13.1:*:*:*:*:*:*:*","matchCriteriaId":"75BED785-BD7D-4A09-9B50-77548E64916D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.13.2:*:*:*:*:*:*:*","matchCriteriaId":"D0A61633-B9B8-44B5-B352-29F4BFBD2BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.14:*:*:*:*:*:*:*","matchCriteriaId":"ACF6D258-2A8C-40C3-9171-4C4A5B22B30C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.14.1:*:*:*:*:*:*:*","matchCriteriaId":"9DB80911-5BD5-401D-8C0A-8229A71D0804"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.15:*:*:*:*:*:*:*","matchCriteriaId":"BE508863-DB77-41D3-A438-3F26C34703E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.15.1:*:*:*:*:*:*:*","matchCriteriaId":"4B79E431-AD91-4269-B427-DD1169D12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.15.2:*:*:*:*:*:*:*","matchCriteriaId":"479069C9-D3E5-4909-8368-0B0F4704810B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.15.3:*:*:*:*:*:*:*","matchCriteriaId":"DADB9299-3EFA-45E6-95BD-7FE2E1B1D565"},{"vulnerable":true,"criteria":"cpe:2.3:a:libcurl:libcurl:7.16.3:*:*:*:*:*:*:*","matchCriteriaId":"21F93365-54FD-45D4-B878-13A53A6806A4"}]}]}],"references":[{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.10.6-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.11.0-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.12.1-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.15.1-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.15.5-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.16.4-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.18.1-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.19.0-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.19.5-CVE-2009-2417.patch","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://curl.haxx.se/docs/adv_20090812.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36238","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36475","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/37471","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/45047","source":"secalert@redhat.com"},{"url":"http://shibboleth.internet2.edu/secadv/secadv_20090817.txt","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4077","source":"secalert@redhat.com"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0124","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/506055/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36032","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1158-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/2263","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52405","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10114","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8542","source":"secalert@redhat.com"},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.10.6-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.11.0-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.12.1-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.15.1-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.15.5-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.16.4-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.18.1-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.19.0-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/CVE-2009-2417/curl-7.19.5-CVE-2009-2417.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://curl.haxx.se/docs/adv_20090812.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/45047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://shibboleth.internet2.edu/secadv/secadv_20090817.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/506055/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/507985/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1158-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2009-0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/2263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-2474","sourceIdentifier":"secalert@redhat.com","published":"2009-08-21T17:30:00.360","lastModified":"2026-06-16T23:09:31.710","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"neon, en versiones anteriores a la 0.28.6, cuando OpenSSL está habilitado, no maneja adecuadamente un caracter '\\0' en un nombre de dominio, en el campo Common Name (CN) del asunto de un certificado X.509, lo cual permite a atacacantes hombre-en-el-medio (man-in-the-middle) suplantar servidores SSL a su elección a través de certificados manipulados expedidos por una Autoridad de Certificación (CA) legítima, una cuestión relacionada con CVE-2009-2408."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webdav:neon:*:*:*:*:*:*:*:*","versionEndExcluding":"0.28.6","matchCriteriaId":"55788024-3E66-4489-AC67-8162BB5E8182"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.5","matchCriteriaId":"46E5D24A-8CA0-4590-9F35-F684D573D030"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*","matchCriteriaId":"7000D33B-F3C7-43E8-8FC7-9B97AADC3E12"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2009-August/001044.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2009-August/001046.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36371","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36799","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:221","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36079","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-835-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2341","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11721","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00924.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00945.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2009-August/001044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.manyfish.co.uk/pipermail/neon/2009-August/001046.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/36371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/36799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/36079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/usn-835-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00924.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00945.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2009-3765","sourceIdentifier":"cve@mitre.org","published":"2009-10-23T19:30:00.203","lastModified":"2026-06-16T23:12:18.997","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"mutt_ssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"mutt_ssl.c en mutt 1.5.19 y 1.5.20, cuando usa OenSSL, no maneja de forma adecuada el caracter  '\\0' en un nombre de dominio, dentro del campo sujeto del Common Name (CN) en los certificados X.509, lo que permite a atacantes man-in-the-middle, espíar servidores SSL de su elección a través de certificados manipulados concedidos por Autoridades Certificadoras, esta relacionado con CVE-2009-2408."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.5.19:*:*:*:*:*:*:*","matchCriteriaId":"89C33B31-B9BC-4E43-8221-219380B4B682"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.5.20:*:*:*:*:*:*:*","matchCriteriaId":"591AA471-643C-49FB-8922-F91774946177"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","matchCriteriaId":"DDA1CA86-1405-4C25-9BC2-5A5E6A76B911"}]}]}],"references":[{"url":"http://dev.mutt.org/trac/changeset/6016:dc09812e63a3/mutt_ssl.c","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=oss-security&m=125369675820512&w=2","source":"cve@mitre.org"},{"url":"http://dev.mutt.org/trac/changeset/6016:dc09812e63a3/mutt_ssl.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125369675820512&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of mutt as shipped with Red Hat Enterprise Linux 3, 4, or 5.\n","lastModified":"2009-10-26T00:00:00"}]}},{"cve":{"id":"CVE-2009-3766","sourceIdentifier":"cve@mitre.org","published":"2009-10-23T19:30:00.233","lastModified":"2026-06-16T23:12:19.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"mutt_ssl.c in mutt 1.5.16 and other versions before 1.5.19, when OpenSSL is used, does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate."},{"lang":"es","value":"En el archivo mutt_ssl.c en mutt versión 1.5.16 y otras versiones anteriores a 1.5.19, cuando es usado OpenSSL, no comprueba el nombre de dominio en el campo Common Name (CN) de un certificado X.509, que permite a los atacantes de tipo man-in-the-middle falsificar servidores SSL por medio de un certificado válido arbitrario."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5.16","versionEndExcluding":"1.5.19","matchCriteriaId":"7A318134-FDFF-4D07-9DCD-7C7F04148552"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","matchCriteriaId":"DDA1CA86-1405-4C25-9BC2-5A5E6A76B911"}]}]}],"references":[{"url":"http://dev.mutt.org/trac/ticket/3087","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/26/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://dev.mutt.org/trac/ticket/3087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/10/26/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-3766\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future update may address this flaw.","lastModified":"2009-11-26T00:00:00"}]}},{"cve":{"id":"CVE-2009-3767","sourceIdentifier":"cve@mitre.org","published":"2009-10-23T19:30:00.250","lastModified":"2026-06-16T23:12:19.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"libraries/libldap/tls_o.c in OpenLDAP 2.2 and 2.4, and possibly other versions, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"libraries/libldap/tls_o.c en OpenLDAP, cuando se usa OpenSSL, no maneja de forma adecuada el caracter  '\\0' en un nombre de dominio, dentro del campo sujeto del Common Name (CN) en los certificados X.509, lo\r\nque permite a atacantes man-in-the-middle, espíar servidores SSL de su elección a través de certificados manipulados concedidos por Autoridades Certificadoras, esta relacionado con CVE-2009-2408.\r\n"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.18","matchCriteriaId":"1479E6E9-32C0-437A-97D0-896D354BCF46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","matchCriteriaId":"DDA1CA86-1405-4C25-9BC2-5A5E6A76B911"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.2","matchCriteriaId":"8333C974-DF5B-4098-A766-EB8D875817F5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036138.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125369675820512&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38769","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40677","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-36.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_o.c.diff?r1=1.8&r2=1.11&f=h","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0543.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3056","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11178","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7274","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036138.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125198917018936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=125369675820512&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-36.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openldap.org/devel/cvsweb.cgi/libraries/libldap/tls_o.c.diff?r1=1.8&r2=1.11&f=h","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0543.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3767\n\nThis issue was addressed in the openldap packages as shipped with Red Hat Enterprise Linux 5 and 4 via: https://rhn.redhat.com/errata/RHSA-2010-0198.html and https://rhn.redhat.com/errata/RHSA-2010-0543.html respectively.\n\nThe Red Hat Security Response Team has rated this issue as having moderate security impact, a future openldap update may address this flaw in Red Hat Enterprise Linux 3.","lastModified":"2010-07-20T00:00:00"},{"organization":"OpenLDAP","comment":"OpenLDAP reported this issue and published a patch for it on 2009-07-30. The patch was included in OpenLDAP 2.4.18 which was released on 2009-09-06. The current release of OpenLDAP is available from the following location:\n\nhttp://www.openldap.org/software/download/","lastModified":"2009-10-30T00:00:00"}]}},{"cve":{"id":"CVE-2009-3555","sourceIdentifier":"secalert@redhat.com","published":"2009-11-09T17:30:00.407","lastModified":"2026-06-16T23:11:50.227","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a \"plaintext injection\" attack, aka the \"Project Mogul\" issue."},{"lang":"es","value":"El protocolo TLS y el protocolo SSL v3.0 y posiblemente versiones anteriores, tal y como se usa en Microsoft Internet Information Services (IIS) v7.0, mod_ssl en el servidor HTTP Apache v2.2.14 y anteriores, OpenSSL antes de v0.9.8l, GnuTLS v2.8.5 y anteriores, Mozilla Network Security Services (NSS) v3.12.4 y anteriores, y otros productos, no asocia apropiadamente la renegociación del Handshake SSL en una conexión existente, lo que permite ataques man-in-the-middle en los que el atacante inserta datos en sesiones HTTPS, y posiblemente otro tipo de sesiones protegidas por SSL o TLS, enviando una petición de autenticación que es procesada retroactivamente por un servidor en un contexto post-renegociación. Se trata de un ataque de \"inyección de texto plano\", también conocido como el problema del \"Proyecto Mogul\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-27T15:38:52.013476Z","id":"CVE-2009-3555","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-300"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.14","matchCriteriaId":"F1BD8600-0EF7-4612-B5C4-E327C0828479"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.5","matchCriteriaId":"38090AC3-C511-4C40-91A5-084CBEC11F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:nss:*:*:*:*:*:*:*:*","versionEndIncluding":"3.12.4","matchCriteriaId":"285433B6-03F9-495E-BACA-AA47A014411C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8k","matchCriteriaId":"EB35F63F-7856-42EE-87A6-7EC7F10C2032"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0:*:openvms:*:*:*:*:*","matchCriteriaId":"718F8E8D-0940-4055-A948-96D25C79323B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"87614B58-24AB-49FB-9C84-E8DDBA16353B"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*","matchCriteriaId":"B3BB5EDB-520B-4DEF-B06E-65CA13152824"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*","matchCriteriaId":"E44669D7-6C1E-4844-B78A-73E253A7CC17"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*","matchCriteriaId":"A2D59BD0-43DE-4E58-A057-640AB98359A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*","matchCriteriaId":"BDE52846-24EC-4068-B788-EC7F915FFF11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","versionStartIncluding":"0.1.0","versionEndIncluding":"0.8.22","matchCriteriaId":"06B2E3E1-C2E0-4A4E-A84D-93C456E868E7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2013-11/0120.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://blogs.iss.net/archive/sslmitmiscsrf.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://blogs.sun.com/security/entry/vulnerability_in_tls_protocol_during","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://clicky.me/tlsvuln","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory"]},{"url":"http://extendedsubset.com/?p=8","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://extendedsubset.com/Renegotiating_TLS.pdf","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01945686","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02436041","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://kbase.redhat.com/faq/docs/DOC-20491","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//May/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//May/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2009-11/msg00029.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=apache-httpd-announce&m=125755783724966&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126150535619567&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127128920008563&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127419602507642&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557596201693&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=132077688910227&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=cryptography&m=125752275331877&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://openbsd.org/errata45.html#010_openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://openbsd.org/errata46.html#004_openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/60521","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://osvdb.org/60972","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://osvdb.org/62210","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://osvdb.org/65202","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://seclists.org/fulldisclosure/2009/Nov/139","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37291","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37292","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37320","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37383","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37399","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37453","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37504","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37604","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37640","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37656","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37675","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37859","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38003","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38020","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38056","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38241","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38484","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38687","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38781","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39127","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39136","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39242","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39243","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39278","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39292","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39317","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39461","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39500","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39628","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39632","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39713","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39819","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40070","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40545","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40747","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40866","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41480","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41490","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41818","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41967","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41972","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42377","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42379","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42467","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42808","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42811","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42816","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/43308","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/44183","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/44954","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48577","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201203-22.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1023148","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.597446","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-273350-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273029-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274990-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021653.1-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021752.1-1","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4004","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4170","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4171","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100070150","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100081611","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100114315","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100114327","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX123359","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://sysoev.ru/nginx/patch.cve-2009-3555.txt","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://tomcat.apache.org/native-doc/miscellaneous/changelog-1.1.x.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-923-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0155","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC67848","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC68054","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC68055","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21426108","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21432298","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24006386","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24025312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=PM00675&apar=only","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.arubanetworks.com/support/alerts/aid-020810.txt","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.betanews.com/article/1257452450","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b01d1d.shtml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1934","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2141","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3253","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg03928.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg03948.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ingate.com/Relnote.php?ver=481","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/120541","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.links.org/?p=780","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.links.org/?p=786","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.links.org/?p=789","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:076","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:089","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-22.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2009-3555.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20091111.txt","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/05/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/05/5","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/06/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/07/3","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/10","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.opera.com/docs/changelogs/unix/1060/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.opera.com/support/search/view/944/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.proftpd.org/docs/RELEASE_NOTES-1.3.2c","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0119.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0130.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0155.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0165.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0167.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0337.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0338.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0339.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0768.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0770.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0786.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0807.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0865.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0986.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0987.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0880.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securegoose.org/2009/11/tls-renegotiation-vulnerability-cve.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507952/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/508075/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/508130/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/515055/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/522176","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36935","source":"secalert@redhat.com","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023163","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023204","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023205","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023206","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023207","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023208","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023209","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023210","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023211","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023212","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023213","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023214","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023215","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023216","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023217","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023218","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023219","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023224","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023243","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023270","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023271","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023272","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023273","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023274","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023275","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023411","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023426","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023427","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023428","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1024789","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.tombom.co.uk/blog/?p=85","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-1010-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-927-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-927-4","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-927-5","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-222A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-287A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0019.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3164","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3165","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3205","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3220","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3310","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3313","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3353","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3354","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3484","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3521","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3587","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0086","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0748","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0848","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0916","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0933","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0982","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0994","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1054","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1191","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1350","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1639","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1673","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1793","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2010","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2745","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3069","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3086","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3126","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0032","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0033","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0086","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=526689","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=545755","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533125","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-049","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54158","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10088","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11578","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11617","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7315","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7478","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7973","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8366","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8535","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/10000/700/sol10737.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://svn.resiprocate.org/rep/ietf-drafts/ekr/draft-rescorla-tls-renegotiate.txt","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00634.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01020.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01029.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2013-11/0120.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://blogs.iss.net/archive/sslmitmiscsrf.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://blogs.sun.com/security/entry/vulnerability_in_tls_protocol_during","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://clicky.me/tlsvuln","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://extendedsubset.com/?p=8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://extendedsubset.com/Renegotiating_TLS.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01945686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02436041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://kbase.redhat.com/faq/docs/DOC-20491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.gnu.org/archive/html/gnutls-devel/2009-11/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=apache-httpd-announce&m=125755783724966&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=126150535619567&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127128920008563&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127419602507642&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557596201693&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=132077688910227&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=cryptography&m=125752275331877&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://openbsd.org/errata45.html#010_openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://openbsd.org/errata46.html#004_openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://osvdb.org/60521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/60972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/62210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/65202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://seclists.org/fulldisclosure/2009/Nov/139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/37291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/37859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/38781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/39819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40866","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/41972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/43308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/44183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/44954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200912-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201203-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1023148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.597446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-273350-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-273029-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-274990-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021653.1-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021752.1-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100070150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100081611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100114315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.avaya.com/css/P8/documents/100114327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX123359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sysoev.ru/nginx/patch.cve-2009-3555.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://tomcat.apache.org/native-doc/miscellaneous/changelog-1.1.x.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ubuntu.com/usn/usn-923-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2009-0155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC67848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC68054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IC68055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21426108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21432298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24006386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24025312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=PM00675&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.arubanetworks.com/support/alerts/aid-020810.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.betanews.com/article/1257452450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b01d1d.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2009/dsa-1934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg03928.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg03948.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ingate.com/Relnote.php?ver=481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/120541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.links.org/?p=780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.links.org/?p=786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.links.org/?p=789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mozilla.org/security/announce/2010/mfsa2010-22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openoffice.org/security/cves/CVE-2009-3555.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20091111.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/05/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/05/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/06/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/07/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/20/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.opera.com/docs/changelogs/unix/1060/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.opera.com/support/search/view/944/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.proftpd.org/docs/RELEASE_NOTES-1.3.2c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0119.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0130.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0155.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0165.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0167.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0337.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0338.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0339.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0768.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0770.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0786.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0807.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0865.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0986.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0987.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0880.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securegoose.org/2009/11/tls-renegotiation-vulnerability-cve.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/507952/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/508075/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/508130/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/515055/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/522176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/36935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1023428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1024789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.tombom.co.uk/blog/?p=85","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-1010-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-927-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-927-4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-927-5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-222A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-287A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2010-0019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v.10.3.1_build1013110726.09%20os_redhat.el6-billing-system-plugin-javascript-injection-example-poc-report.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=526689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=545755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=533125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/10000/700/sol10737.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://svn.resiprocate.org/rep/ietf-drafts/ekr/draft-rescorla-tls-renegotiate.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00428.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00442.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00449.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00634.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00645.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00944.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/10579","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3555\n\nAdditional information can be found in the Red Hat Knowledgebase article:\nhttp://kbase.redhat.com/faq/docs/DOC-20491","lastModified":"2009-11-20T00:00:00"}]}},{"cve":{"id":"CVE-2009-3941","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T19:30:01.047","lastModified":"2026-06-16T23:12:40.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Martin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"Martin Lambers mpop versiones anteriores a v1.4.19, cuando usa OpenSSL, no maneja adecuadamente un carácter '\\0' en un nombre de dominio (1) en el campo nombre común del sujeto o (2) en el campo nombre alternativo del sujeto de un certificado X.509, permitiendo que atacantes de hombre en medio (man-in-the-middle) suplantar a servidores SSL de su elección mediante un certificado modificado emitido por una Autoridad de Certificación legítima, estando relacionado con el CVE-2009-2408."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.18","matchCriteriaId":"2A334487-BFC7-4BD3-A41C-B4A7A03FD688"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F3D33CFC-B3AD-447D-9ED7-B9EB56F37963"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C1101564-6C93-4116-8286-423ECF1CE1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"52F89E31-4C4F-4596-8BDB-DD6AA202A66B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"13B423FE-A656-4E05-8E56-ADA3BB25055C"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A4533F4B-B737-4AE8-8BE4-52F18AC81CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"73161FA8-6BDB-480A-959A-FE75A0A094A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5D831D74-1D1A-43BF-989C-CA2541B34F2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"EA886F91-162A-4272-A854-E4C2ABA1880F"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C73DAC9F-AF34-412B-8483-BD642E9AD7CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2E5F1142-E4BC-4AC4-AB85-33A5AC35D7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"03C05F7D-BA83-44D4-8E47-45CF339EFB63"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9A312B4E-F43D-4649-A8F8-811657D5D6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8E9BD996-6003-4ACA-A661-810018EF750D"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"15117F01-79FF-47A7-8D1E-BA1F8E96A1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FB4C433A-9796-4C11-8B3F-DD93191B200F"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"C63DB55C-3454-4E28-9BE3-6E2AF7F0C2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"DBAF238F-6E35-4C79-BA57-9DFBCE1F32DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"09FB5DCD-94E2-469E-83E8-E7489DFECF28"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"813E3390-A91A-440E-947F-98777CF0C008"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"83BAB091-5DF5-48D1-B12F-FAA7AE304BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"832106E3-7743-412D-B92E-CF8F4AFD630E"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"29EA91C5-EAD8-476C-A198-3BB9D11DF47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"00E17910-D6CC-4AE3-B119-90798F441338"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"7DE2045F-C0EB-433F-8D44-7B257AF1A976"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BD03AAD4-18CE-4109-B63E-F0447AD5D57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F60C96B3-834A-467E-B823-56F95AC53394"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2BC5660E-D2FB-4D73-8D45-BC92388CFA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EF5CED20-DF1C-4172-ABC4-BB8C88A59D71"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2B75E57F-D5A5-4925-95A1-7680D9A186C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E71A841C-1ED3-4634-8BA4-5F0A50CB6636"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CE437EFD-6F1F-4946-91A7-E198DDC70693"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"94F9FEC8-15D0-4327-975F-359A595A10B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"6AD2F2D6-BD1A-4413-9499-B45352AE5D2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"2011EBF2-DAF7-4F9A-861E-8C7CB01E9620"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"894E6D56-3A5F-49DC-B99D-2148B548335B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6DF077CF-E698-4506-8AD8-B339166298BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"6D879455-E7E1-448C-A425-E9C576540E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"68D38E74-A95C-4009-AEBD-3575A98824AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3B8B0B5D-9932-4924-B0C9-C10B8EA46F56"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"A0432B82-D516-4771-9D2E-684CA81A5680"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:mpop:1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"F6A767CC-D28E-497E-9CB5-DE930304C7C7"}]}]}],"references":[{"url":"http://mpop.sourceforge.net/news.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/37312","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3225","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://mpop.sourceforge.net/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/37312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-3942","sourceIdentifier":"cve@mitre.org","published":"2009-11-16T19:30:01.077","lastModified":"2026-06-16T23:12:40.363","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Martin Lambers msmtp before 1.4.19, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"Martin Lambers msmtp versiones anteriores a v1.4.19, cuando usa OpenSSL, no maneja adecuadamente un carácter '\\0' en un nombre de dominio (1) en el campo nombre común del sujeto o (2) en el campo nombre alternativo del sujeto de un certificado X.509, permitiendo que atacantes de hombre en medio (man-in-the-middle) suplantar a servidores SSL de su elección mediante un certificado modificado emitido por una Autoridad de Certificación legítima, estando relacionado con el CVE-2009-2408."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.18","matchCriteriaId":"5D01B530-981C-4EF5-89E6-538ADA25D2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"99E4CB87-6453-43EA-B969-1D26F047B868"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C28522F5-40C1-4CB2-8A21-FFF9C75B6C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0D297F70-E8FF-45BA-A299-1B24D0616855"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ABEE80E9-C4FF-4AB3-8DFA-2468B01861E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1AAB4EC4-2035-4421-90ED-772E01BC6725"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"448B136B-7FCB-444F-A8AE-89DBA1308EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"E3F98F29-131F-49E6-A819-89AB1CDFB8F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A9C11A-A8FC-4132-BE35-1A55A869D962"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B6304EC0-8977-4164-9355-E419B2BDFE12"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"F3D69119-DB27-4439-A4A1-20B22226D3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"86A0B3AA-EDED-4BC9-9516-23A1870C68FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"FD544309-CACE-4D0E-8921-B972988939DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4EDDDAAA-FE6D-4E3D-B4BA-2FDEADAE8CD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"9A71A198-495A-4BA1-A66F-734E49126710"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"6806D84A-C775-46CC-BD67-1FB70ACD7B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"9267E3FC-3B89-4E9D-924E-401FA7B1872C"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"7F49177D-4F29-40DA-AAB4-39B71BDA8210"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"C241047D-1A6C-4E49-968D-AF08881B57D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"71F0F562-4906-415B-87CE-FA17126AC186"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"030746E6-A9E2-4A3C-B51F-6920B558A123"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"2D4E425C-24CC-4D64-9500-AA37120BDB20"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"81797111-EE62-49EB-8804-BE493A5CCB2B"},{"vulnerable":false,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E3EA2E59-C745-4926-B6A4-FA7512EE9B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DB35C639-4D53-4A36-A567-F0742DE8F6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C269D45F-7E20-4E85-8EC2-D05155750CE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"48125BDD-B875-4650-8B1D-D28C5F04208F"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1C2AAA19-7026-4EF1-85A4-87D9B08D708B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B4A3BE86-51CA-4DFC-809B-D38075DC052E"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"390C2B54-479E-4DE3-9816-E60251455E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"77FB50D8-DBE6-4547-A643-3F3749F98716"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"96C296F7-053B-4C68-AD20-9F2A716F9E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"B674C7D5-9F59-4604-8469-FAA003AE7F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"91F59DE1-329E-42E1-84CC-8CE5B032781D"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"42FEED21-B6B0-4CE5-BE04-B284DEED46D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2ABFEA78-CE3C-4795-93C8-87F1EDECED1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"BAA30198-E58E-408B-96CB-52417FC51CE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"E9C27411-6B62-4B1B-8E87-2653F5712E6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"237AF741-3C2A-4F55-9286-CF6FF4977557"},{"vulnerable":false,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D92E239B-8BD7-4DA7-BC86-4F64638C5203"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.12:*:*:*:*:*:*:*","matchCriteriaId":"2AF8F0CF-A59D-4D0C-9414-BEE4B9714EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.13:*:*:*:*:*:*:*","matchCriteriaId":"11215AD3-0AB1-47B1-B55F-DC6F40DB4F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.14:*:*:*:*:*:*:*","matchCriteriaId":"B5B2D527-F99B-45A6-BF7B-D04CC28672BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"3580054B-7A34-4CE3-8B43-D398858E83D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.16:*:*:*:*:*:*:*","matchCriteriaId":"1EF98D9C-A072-453D-B0C6-600DF595E3E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_lambers:msmtp:1.4.17:*:*:*:*:*:*:*","matchCriteriaId":"21BAABE8-97D9-49AE-A9F6-A1F49E8928BB"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","source":"cve@mitre.org"},{"url":"http://msmtp.sourceforge.net/news.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37321","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3224","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://msmtp.sourceforge.net/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2009-4028","sourceIdentifier":"secalert@redhat.com","published":"2009-11-30T17:30:00.327","lastModified":"2026-06-16T23:12:51.953","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library."},{"lang":"es","value":"La función vio_verify_callback en vio_verify_callback de MySQL v5.0.x anteriores a v5.0.88 y v5.1.x anteriores a v5.1.41, cuando utiliza OpenSSL, acepta un valor cero para la profundidad de los certificados X.509, permitiendo a atacantes de hombre en medio (man-in-the-middle) suplantar servidores MySQL de su elección basados en SSL mediante un certificado creado específicamente, como se ha demostrado por un certificado presentado por un servidor vinculado con la biblioteca yaSSL."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.87","matchCriteriaId":"749E313A-CD07-40DA-97D6-58F53D62231B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DC198CDB-CAC0-41DD-9FCD-42536E7FE11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B77A2761-2B44-4061-9C29-A54F90A1AD83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B3AD851-056F-4E57-B85B-4AC5A5A20C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FD24EA8C-4FCA-4F40-B2EA-7DFA49432483"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"754B78F2-A03C-40BE-812B-F5E57B93D20B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"575039BD-A8B6-4459-B5F0-F220A94650EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"BDA03768-74D2-4C5D-ABCF-8A91F9E6C273"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"542B23CB-7535-4EF7-B926-466A5161A0D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*","matchCriteriaId":"45E686C3-4100-465C-9F45-068580B496E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"6E9F09D8-6FAE-4A5B-AE04-248CD52C5FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*","matchCriteriaId":"DB618DB2-6B00-4E99-8232-937D2C51986B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*","matchCriteriaId":"665E063D-355D-4A5A-A05F-36BF582DE36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.22.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"214E3CF9-6362-4F5A-91B7-5E69564F7144"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*","matchCriteriaId":"F4C6CD84-EA5D-451F-AFC3-5F7094F0017D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.30:*:*:*:*:*:*:*","matchCriteriaId":"BEF9271A-A816-44F6-A811-ECC1FB0993C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.36:*:*:*:*:*:*:*","matchCriteriaId":"F482D3D3-205C-495E-AF3A-E9C3018111F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.44:*:*:*:*:*:*:*","matchCriteriaId":"53853D65-F2C6-410F-9CF8-DED19B66BD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.54:*:*:*:*:*:*:*","matchCriteriaId":"D927706B-565F-4152-8F86-AC85F1AA469F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.56:*:*:*:*:*:*:*","matchCriteriaId":"8C0291F7-27D9-4634-9DD3-21827C1CC5ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.60:*:*:*:*:*:*:*","matchCriteriaId":"35D54A38-E7A0-4B89-BBA5-D98D4D7FF3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.66:*:*:*:*:*:*:*","matchCriteriaId":"1A7AFEB8-711B-4DED-A24E-38012F415FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.82:*:*:*:*:*:*:*","matchCriteriaId":"9369CF20-D05C-41A2-8F9E-DE259FCF9E1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.0.84:*:*:*:*:*:*:*","matchCriteriaId":"34DDFA0E-91D5-4B4C-8BB7-58B663D7F94F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"35BED939-3366-4CBF-B6BF-29C0C42E97F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*","matchCriteriaId":"7D0F7A49-62A2-4201-B6F3-8DB9902A4480"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.31:*:*:*:*:*:*:*","matchCriteriaId":"2C56D394-4CE1-4237-A681-1474B5436CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:*","matchCriteriaId":"B2BFBC7B-5C23-4CDB-AE4F-721378C36B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.34:*:*:*:*:*:*:*","matchCriteriaId":"F68CA8CA-2755-450A-80E2-286A571987F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:5.1.37:*:*:*:*:*:*:*","matchCriteriaId":"6287E2C9-DF38-4E4E-A8E4-6AC6ADDC920D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*","matchCriteriaId":"19001041-22C4-4D2C-A918-378DACBB1DF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*","matchCriteriaId":"6F610D56-6BB6-48FB-B43A-670CE9168500"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1668BB5B-E7FB-4430-B8D5-89E308F5DD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E3F44DA1-1509-4AC7-AB6B-2B2A834A16AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7A2D6DF6-FE5D-428F-BCEB-E7832C2B4FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A56ACB60-EC2C-45AF-B923-B3A90A2F7AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"67C52D66-3BCA-4854-BF09-CB6DF1AC0E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*","matchCriteriaId":"BF54CC8D-B736-461D-B693-686E862EF969"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*","matchCriteriaId":"5E5EADE4-9E1B-4A1C-B3B5-ACF1287A19E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*","matchCriteriaId":"053ACE9B-A146-42C0-ADB2-47F6119965D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*","matchCriteriaId":"30B4F891-2A03-45A8-A49C-7F8B8F7D8407"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"69E62AC4-954E-476C-98BE-C138E328AE7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:*","matchCriteriaId":"6B88385C-F5FB-401F-80D5-5BF11CE3C19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.23:*:*:*:*:*:*:*","matchCriteriaId":"AA586E2B-A349-47C8-A17C-DA9016C6C3B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.25:*:*:*:*:*:*:*","matchCriteriaId":"C30CA14C-AE28-4D9A-B53D-B7C28D3BA56B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.26:*:*:*:*:*:*:*","matchCriteriaId":"811780EA-8805-41A6-A920-A201CCC80790"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.27:*:*:*:*:*:*:*","matchCriteriaId":"11873AEA-5D6C-4AC0-915A-8A2869B2EFF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.30:sp1:*:*:*:*:*:*","matchCriteriaId":"A7753CE5-61C4-4FBC-BB60-F7D4493E76E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.32:*:*:*:*:*:*:*","matchCriteriaId":"7EDC2EB4-2C8D-4EF7-83A6-CBE6FF759DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.33:*:*:*:*:*:*:*","matchCriteriaId":"5965032E-5BC0-4E69-B097-F9EE2B24C861"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.37:*:*:*:*:*:*:*","matchCriteriaId":"35F21A5A-F9C0-4860-80AD-1D3937483F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.38:*:*:*:*:*:*:*","matchCriteriaId":"B54F660F-AE43-4F3B-8935-5712CAE860A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*","matchCriteriaId":"4413BB52-6FBD-4C12-8864-ADDC65E45B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.42:*:*:*:*:*:*:*","matchCriteriaId":"8B49F9BA-560B-40AE-9457-436830CDD371"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:*","matchCriteriaId":"F53A8437-C61A-4203-B341-B5596569E50B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.50:*:*:*:*:*:*:*","matchCriteriaId":"A1435669-9BDA-40D4-BB30-C8AE1C3E7649"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.51:*:*:*:*:*:*:*","matchCriteriaId":"A8EBAE3C-F24D-4935-96BF-9541EC03B8F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.52:*:*:*:*:*:*:*","matchCriteriaId":"EA95EE27-389A-4068-AAC1-AD64DD6BB006"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.75:*:*:*:*:*:*:*","matchCriteriaId":"2FA3E354-4366-46B5-ACD2-E72D0C8320A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.77:*:*:*:*:*:*:*","matchCriteriaId":"0C002047-0FB1-4DC6-9108-B4B5AAFAC16A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.81:*:*:*:*:*:*:*","matchCriteriaId":"584C0690-2826-4389-95AD-42048AEE1916"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.83:*:*:*:*:*:*:*","matchCriteriaId":"0CB85180-0F28-4281-BB59-E3F29BE25C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.85:*:*:*:*:*:*:*","matchCriteriaId":"2E96AD6D-3AC1-4232-B0A9-C31E1BF6B169"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.86:*:*:*:*:*:*:*","matchCriteriaId":"565E57C0-B6B9-4868-8907-B436E5D5C56F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F58612F4-1CAC-4BFC-A9B2-3D4025F428FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"73F49A1D-BCA3-4772-8AB3-621CCC997B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F719DD8E-8379-43C3-97F9-DE350E457F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"342BB65B-1358-441C-B59A-1756BCC6414A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"8589B1E7-0D6D-44B4-A36E-8225C5D15828"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"88FEEE64-899F-4F55-B829-641706E29E32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"D8597F56-BB14-480C-91CD-CAB96A9DDD8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"7F4C5C88-95A7-4DDA-BC2F-CAFA47B0D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*","matchCriteriaId":"5EB2323C-EFE2-407A-9AE9-8717FA9F8625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*","matchCriteriaId":"6341F695-6034-4CC1-9485-ACD3A0E1A079"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*","matchCriteriaId":"D1DF5F19-ECD9-457F-89C6-6F0271CF4766"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*","matchCriteriaId":"446DB5E9-EF4C-4A53-911E-91A802AECA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*","matchCriteriaId":"5829BE6A-BC58-482B-9DA1-04FDD413A7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*","matchCriteriaId":"C85D20DF-702B-4F0B-922D-782474A4B663"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*","matchCriteriaId":"73A09785-3CA4-4797-A836-A958DCDC322F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*","matchCriteriaId":"C4DE3D79-0966-4E14-9288-7C269A2CEEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*","matchCriteriaId":"564F6A24-BEB3-4420-A633-8AD54C292436"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*","matchCriteriaId":"047FBCCD-DE7C-41FA-80A3-AD695C643C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*","matchCriteriaId":"687CC501-4CB2-4295-86F6-A5E45DEC2D0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*","matchCriteriaId":"822A718D-AD9D-4AB9-802F-5F5C6309D809"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*","matchCriteriaId":"CA2D4002-FD96-462D-BA55-4624170CAA4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*","matchCriteriaId":"0A40FE1C-6EB0-4C75-867E-B1F8408E5A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.23:a:*:*:*:*:*:*","matchCriteriaId":"9D7B68A6-13FA-4EAE-8ED0-5940A72A3D82"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.24:*:*:*:*:*:*:*","matchCriteriaId":"64F37486-E91C-47C4-9F53-4CFDBF8C1EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.25:*:*:*:*:*:*:*","matchCriteriaId":"53A7D87C-E34C-4595-88D5-CD483B3E8CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.26:*:*:*:*:*:*:*","matchCriteriaId":"28103843-D04F-4180-A71D-8DAC4E28C2F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.27:*:*:*:*:*:*:*","matchCriteriaId":"5FEAE55E-7330-4A5A-A862-8D7E7621EB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.28:*:*:*:*:*:*:*","matchCriteriaId":"848D4621-AFB8-4A12-A20E-4FC9F1774DE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.29:*:*:*:*:*:*:*","matchCriteriaId":"5138E55E-58C1-44B5-A296-A46DF2920DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*","matchCriteriaId":"31B9607A-1E58-4471-BEDE-03484A1E9739"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.31:sp1:*:*:*:*:*:*","matchCriteriaId":"FD25674A-B158-4770-B269-A9A039C79A8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.33:*:*:*:*:*:*:*","matchCriteriaId":"DDCB266F-E642-4447-8B9C-A58ED4D29227"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.34:sp1:*:*:*:*:*:*","matchCriteriaId":"8FF8582D-3AB5-4F16-AD52-ED5D0CE10120"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.35:*:*:*:*:*:*:*","matchCriteriaId":"AB79189C-344C-4D5D-A8D8-C3852F7BCFDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.36:*:*:*:*:*:*:*","matchCriteriaId":"63A48A7A-8DE5-4278-AD0B-4736B45DF337"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.37:sp1:*:*:*:*:*:*","matchCriteriaId":"F828A5AD-5EA5-4B02-8BD4-0B2A109342F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.38:*:*:*:*:*:*:*","matchCriteriaId":"34E9C1C2-3F7E-4447-92B8-8D4F2A623812"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.39:*:*:*:*:*:*:*","matchCriteriaId":"25A6FDB0-A86C-4312-AB75-C2A942315DE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.40:*:*:*:*:*:*:*","matchCriteriaId":"F47B75E9-46C7-45D9-86FA-CBD2B2F853BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.1.40:sp1:*:*:*:*:*:*","matchCriteriaId":"042A36D5-A5CE-4DAF-B0CA-2F7F6FEB2D37"}]}]}],"references":[{"url":"http://bugs.mysql.com/47320","source":"secalert@redhat.com"},{"url":"http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html","source":"secalert@redhat.com"},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html","source":"secalert@redhat.com"},{"url":"http://lists.mysql.com/commits/87446","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=125881733826437&w=2","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/19/3","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/16","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0109.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10940","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8510","source":"secalert@redhat.com"},{"url":"http://bugs.mysql.com/47320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.mysql.com/commits/87446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=oss-security&m=125881733826437&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/19/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2009/11/23/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4211","sourceIdentifier":"cve@mitre.org","published":"2009-12-04T22:30:00.203","lastModified":"2026-06-16T23:13:15.113","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The U.S. Defense Information Systems Agency (DISA) Security Readiness Review (SRR) script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to (1) java, (2) openssl, (3) php, (4) snort, (5) tshark, (6) vncserver, or (7) wireshark, which allows local users to gain privileges via a Trojan horse program."},{"lang":"es","value":"El script Security Readiness Review (SRR) de la U.S. Defense Information Systems Agency (DISA) para la plataforma Solaris x86 ejecuta ficheros como root en directorios elegidos para nombres de fichero iguales a (1) java, (2) openssl, (3) php, (4) snort, (5) tshark, (6) vncserver, o (7) wireshark, permitiendo a usuarios locales ganar privilegios mediante un programa troyano."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"FEEC0C5A-4A6E-403C-B929-D1EC8B0FE2A8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:disa:srr_for_solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"B2B2F07A-2013-43C0-B408-72AE19B2E358"}]}]}],"references":[{"url":"http://securitytracker.com/id?1023265","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/433821","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/508188/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/37200","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1023265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/433821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/508188/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/37200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-4355","sourceIdentifier":"cve@mitre.org","published":"2010-01-14T19:30:00.390","lastModified":"2026-06-16T23:13:30.543","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678."},{"lang":"es","value":"Fuga de memoria en la función zlib_stateful_finish en crypto/comp/c_zlib.c en OpenSSL v0.9.8l y anteriores, y  v1.0.0 Beta a la Beta 4, permite a atacantes remoso provocar una denegación de servicio (consumo de memoria) a través de vectores que provocan llamadas incorrectas a la función CRYPTO_free_all_ex_data, como se demostró usando SSLv3 y PHP con el Apache HTTP Server, una cuestión relacionada con el CVE-2008-1678."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8l","matchCriteriaId":"81FB3B26-CC83-4FA5-BDE1-05F35AB99741"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*","matchCriteriaId":"2B8C80A1-D1E7-42D4-8DBC-CB7637D7598E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*","matchCriteriaId":"3EB3990A-3457-4CD6-9EEC-F2D4BC143932"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:*:*:*:*:*:*","matchCriteriaId":"06110A61-8857-46D5-BEE1-882197756DED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"}]}]}],"references":[{"url":"http://cvs.openssl.org/chngview?cn=19068","source":"cve@mitre.org"},{"url":"http://cvs.openssl.org/chngview?cn=19069","source":"cve@mitre.org"},{"url":"http://cvs.openssl.org/chngview?cn=19167","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=127128920008563&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38175","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38181","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38200","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38761","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39461","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42724","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42733","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0004","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2010/dsa-1970","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:022","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2010/01/13/3","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-884-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0124","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0839","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0916","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546707","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-3157","source":"cve@mitre.org"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11260","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12168","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6678","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"cve@mitre.org"},{"url":"http://cvs.openssl.org/chngview?cn=19068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.openssl.org/chngview?cn=19069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.openssl.org/chngview?cn=19167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127128920008563&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/38761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-1970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2010/01/13/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-884-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=546707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-3157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-3245","sourceIdentifier":"cve@mitre.org","published":"2010-03-05T19:30:00.343","lastModified":"2026-06-16T23:11:13.327","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors."},{"lang":"es","value":"OpenSSL en versiones anterioes a v0.9.8m cuando recibe un valor de retorno NULL de la funcion bn_wexpand hace una llamada a (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, y (4) engines/e_ubsec.c, lo que tiene un impacto inespecifico y vectores de ataque dependientes del contexto."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8l","matchCriteriaId":"81FB3B26-CC83-4FA5-BDE1-05F35AB99741"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=127128920008563&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=openssl-cvs&m=126692159706582&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=openssl-cvs&m=126692170906712&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=openssl-cvs&m=126692180606861&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://packetstormsecurity.com/files/153392/ABB-HMI-Outdated-Software-Components.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/37291","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/38761","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39461","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/39932","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42724","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42733","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4723","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:076","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0977.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/38562","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-1003-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0839","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0916","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/0933","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/1216","source":"cve@mitre.org"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"cve@mitre.org"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"cve@mitre.org"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11738","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6640","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9790","source":"cve@mitre.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127128920008563&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127678688104458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=openssl-cvs&m=126692159706582&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=openssl-cvs&m=126692170906712&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=openssl-cvs&m=126692180606861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://packetstormsecurity.com/files/153392/ABB-HMI-Outdated-Software-Components.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/37291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/38761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/39461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/38562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1003-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9790","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-3245\n\nThis issue was fixed in openssl packages in Red Hat Enterprise Linux 5 via: https://rhn.redhat.com/errata/RHSA-2010-0162.html\n\nThis issue was fixed in openssl096b packages in Red Hat Enterprise Linux 3 and 4 via: https://rhn.redhat.com/errata/RHSA-2010-0173.html\n\nThe Red Hat Security Response Team has rated this issue as having low security impact on openssl packages in Red Hat Enterprise Linux 3 and 4, a future update may address this flaw.","lastModified":"2010-03-25T00:00:00"}]}},{"cve":{"id":"CVE-2010-0433","sourceIdentifier":"secalert@redhat.com","published":"2010-03-05T19:30:00.547","lastModified":"2026-06-16T23:16:09.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot."},{"lang":"es","value":"La funcion kssl_keytab_is_available en ssl/kssl.c en OpenSSL before v0.9.8n, cuando Kerberos esta activo pero los ficheros de configuracion de Kerberos no pueden ser abiertos, no comprueba adecuadamente cierto valor de retorno, lo que permite a atacantes remotos producir una denegacion de servicio (desreferencia a puntero nulo y caida de demonio) a traves de la negociacion del cifrado SSL, lo que se demuestra mediante la instalacion chroot de Dovecot o stunnel sin los ficheros de configuracion de Kerberos dentro de chroot."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8m","matchCriteriaId":"D2DC14B4-BFB1-4F37-9A6D-1488C394F500"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/chngview?cn=19374","source":"secalert@redhat.com"},{"url":"http://groups.google.com/group/mailing.openssl.users/browse_thread/thread/c3e1ab0034ca4b4c/66aa896c3a78b2f7","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127128920008563&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127557640302499&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39461","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39932","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/43311","source":"secalert@redhat.com"},{"url":"http://www.mail-archive.com/dovecot%40dovecot.org/msg26224.html","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:076","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/changelog.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2010/03/03/5","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0839","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0916","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0933","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1216","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=567711","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=569774","source":"secalert@redhat.com"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"secalert@redhat.com"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12260","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6718","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9856","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.openssl.org/chngview?cn=19374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://groups.google.com/group/mailing.openssl.users/browse_thread/thread/c3e1ab0034ca4b4c/66aa896c3a78b2f7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127128920008563&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127557640302499&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/dovecot%40dovecot.org/msg26224.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2010/03/03/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=567711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=569774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2010-0928","sourceIdentifier":"cve@mitre.org","published":"2010-03-05T19:30:00.797","lastModified":"2026-06-16T23:17:09.387","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a \"fault-based attack.\""},{"lang":"es","value":"OpenSSL 0.9.8i en Gaisler Research LEON3 SoC sobre Xilinx Virtex-II Pro FPGA utiliza un algoritmo Fixed Width Exponentiation (FWE) para ciertos calculos de firma, el cual no verifica previamente la firma del cliente, lo que hace que atacantes proximos fisicamente puedan determinar la clave privada a traves de una modificacion del voltaje del microprocesador, relacionado con el ataque \"fault-based attack.\""}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:N/A:N","baseScore":4.0,"accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:gaisler:leon3_soc:*:*:*:*:*:*:*:*","matchCriteriaId":"033DE945-8FC7-4DCB-9F21-43F2B263ED30"},{"vulnerable":false,"criteria":"cpe:2.3:h:xilinx:virtex-ii_pro_fpga:*:*:*:*:*:*:*:*","matchCriteriaId":"69DC564C-6B9D-40B7-B23B-4C11A350C174"}]}]}],"references":[{"url":"http://rdist.root.org/2010/03/08/attacking-rsa-exponentiation-with-fault-injection/","source":"cve@mitre.org"},{"url":"http://www.eecs.umich.edu/~valeria/research/publications/DATE10RSA.pdf","source":"cve@mitre.org"},{"url":"http://www.networkworld.com/news/2010/030410-rsa-security-attack.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/62808","source":"cve@mitre.org"},{"url":"http://www.theregister.co.uk/2010/03/04/severe_openssl_vulnerability/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/56750","source":"cve@mitre.org"},{"url":"http://rdist.root.org/2010/03/08/attacking-rsa-exponentiation-with-fault-injection/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eecs.umich.edu/~valeria/research/publications/DATE10RSA.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.networkworld.com/news/2010/030410-rsa-security-attack.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/62808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.theregister.co.uk/2010/03/04/severe_openssl_vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/56750","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"CVE-2010-0928 describes a fault-based attack on OpenSSL where an attacker has precise control over the target system environment in order to be able to introduce faults through power supply manipulation.\n\nThe attack is not a viable threat to OpenSSL as used in Red Hat products. The Red Hat Security Response Team has rated this issue as having low security impact and we do not intend to issue updates to address it.","lastModified":"2010-03-08T00:00:00"}]}},{"cve":{"id":"CVE-2010-0740","sourceIdentifier":"secalert@redhat.com","published":"2010-03-26T18:30:00.467","lastModified":"2026-06-16T23:16:45.377","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"La función ssl3_get_record en ssl/s3_pkt.c en OpenSSL v0.9.8f hasta v0.9.8m permite a atacantes remotos provocar una denegación de servicio (caída) a través de un registro mal formado en una conexión TLS que provoca una desreferencia a puntero NULL, relativo al número de versión menor. NOTA: algunos de estos detalles se han obtenido de información de terceras personas."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127128920008563&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=127557640302499&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/39932","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/43311","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4723","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:076","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20100324.txt","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1023748","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0710","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0839","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/0933","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1216","source":"secalert@redhat.com"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"secalert@redhat.com"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11731","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127128920008563&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=127557640302499&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/39932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20100324.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1023748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/0933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11731","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorImpact":"Per: http://www.openssl.org/news/secadv_20100324.txt\r\n\r\n'Affected versions depend on the C compiler used with OpenSSL:\r\n\r\n- If 'short' is a 16-bit integer, this issue applies only to OpenSSL 0.9.8m.\r\n- Otherwise, this issue applies to OpenSSL 0.9.8f through 0.9.8m.'","vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of openssl as shipped with Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2010-03-27T00:00:00"}]}},{"cve":{"id":"CVE-2010-0742","sourceIdentifier":"secalert@redhat.com","published":"2010-06-03T14:30:01.507","lastModified":"2026-06-16T23:16:45.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad en la implemtanción \"Cryptographic Message Syntax\" (CMS) en \"crypto/cms/cms_asn1.c\" en OpenSSL anterior a v0.9.8o y v1.x anterior a v1.0.0a no maneja correctamente estructuras que contienen \"OriginatorInfo\" las cuales permiten a atacantes dependientes del contexto modificar direcciones inválidas de memoria o llevar a cabo ataques de liberación doble con posibilidad de ejecutar código aleatorio a través de vectores sin especificar.\r\n"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8n","matchCriteriaId":"8376129A-7020-489D-A7EF-C64E4EFDA0AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"}]}]}],"references":[{"url":"http://cvs.openssl.org/chngview?cn=19693","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/filediff?f=openssl/crypto/cms/cms_asn1.c&v1=1.8&v2=1.8.6.1","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=129138643405740&w=2","source":"secalert@redhat.com"},{"url":"http://rt.openssl.org/Ticket/Display.html?id=2211&user=guest&pass=guest","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/40000","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40024","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42457","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42724","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42733","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20100601.txt","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/40502","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1313","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3105","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=598738","source":"secalert@redhat.com"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"secalert@redhat.com"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"secalert@redhat.com"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12395","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/chngview?cn=19693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.openssl.org/filediff?f=openssl/crypto/cms/cms_asn1.c&v1=1.8&v2=1.8.6.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=129138643405740&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rt.openssl.org/Ticket/Display.html?id=2211&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20100601.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/40502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=598738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.bluecoat.com/index?page=content&id=SA50","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12395","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2010-1633","sourceIdentifier":"secalert@redhat.com","published":"2010-06-03T14:30:01.570","lastModified":"2026-06-16T23:18:45.073","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"RSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns uninitialized memory upon failure, which might allow context-dependent attackers to bypass intended key requirements or obtain sensitive information via unspecified vectors.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad en la verificación de la recuperación RSA en la función EVP_PKEY_verify_recover en OpenSSL v1.x anterior a v1.0.0a, como es  utilizada por \"pkeyutl\" y posiblemente otras aplicaciones,  devuelve memoria no inicializada tras el fallo, el cual permite a atacantes dependientes del contexto evitar requerimientos de clave y otro información sensible a través de vectores sin especificar. Nota: algunos de estos detalles se han obtenido de información de terceros."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"}]}]}],"references":[{"url":"http://cvs.openssl.org/chngview?cn=19693","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/filediff?f=openssl/crypto/rsa/rsa_pmeth.c&v1=1.34&v2=1.34.2.1","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/40024","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20100601.txt","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/40503","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/1313","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=598732","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/chngview?cn=19693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.openssl.org/filediff?f=openssl/crypto/rsa/rsa_pmeth.c&v1=1.34&v2=1.34.2.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20100601.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/40503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/1313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=598732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2010-2939","sourceIdentifier":"secalert@redhat.com","published":"2010-08-17T20:00:03.923","lastModified":"2026-06-16T23:21:47.643","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted private key with an invalid prime.  NOTE: some sources refer to this as a use-after-free issue."},{"lang":"es","value":"Vulnerabilidad de doble liberación en la función ssl3_get_key_exchange en el cliente OpenSSL (ssl/s3_clnt.c) de OpenSSL v1.0.0a, v0.9.8, v0.9.7, y posiblemente otras versiones, cuando usa ECDH, permite a atacantes depediendo del contexto provocar una denegación de servicio (caída) y posiblemente ejecutar código a su elección a través de claves privadas manipuladas con un número no válido. NOTA: algunas fuentes se refieren a esto como un problema de uso después de la liberación."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=130331363227777&w=2","source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2010/Aug/84","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/40906","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/41105","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42309","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42413","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/43312","source":"secalert@redhat.com"},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-10:10.openssl.asc","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1024296","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668793","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2100","source":"secalert@redhat.com"},{"url":"http://www.mail-archive.com/openssl-dev%40openssl.org/msg28043.html","source":"secalert@redhat.com"},{"url":"http://www.mail-archive.com/openssl-dev%40openssl.org/msg28045.html","source":"secalert@redhat.com"},{"url":"http://www.mail-archive.com/openssl-dev%40openssl.org/msg28049.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2010/08/11/6","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1003-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/2038","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2229","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/3077","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130331363227777&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2010/Aug/84","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/41105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-10:10.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1024296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/openssl-dev%40openssl.org/msg28043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/openssl-dev%40openssl.org/msg28045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/openssl-dev%40openssl.org/msg28049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2010/08/11/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1003-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/2038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2010-1378","sourceIdentifier":"product-security@apple.com","published":"2010-11-15T23:00:01.627","lastModified":"2026-06-16T23:18:14.233","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL in Apple Mac OS X 10.6.x before 10.6.5 does not properly perform arithmetic, which allows remote attackers to bypass X.509 certificate authentication via an arbitrary certificate issued by a legitimate Certification Authority."},{"lang":"es","value":"OpenSSL en Apple Mac OS X v10.6.x anterior a v10.6.5 no realiza apropiadamente operaciones aritméticas, que permite a atacantes remotos evitar certificados autenticados X.509 a través de un certificado de su elección emitido por una Autoridad de Certificación legítima."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndExcluding":"10.6.5","matchCriteriaId":"5BB1D490-FDFB-468C-942D-0BC828B5D3F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndExcluding":"10.6.5","matchCriteriaId":"65FA6685-8E50-40CA-A61D-649AECC5F48F"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"product-security@apple.com","tags":["Mailing List"]},{"url":"http://support.apple.com/kb/HT4435","source":"product-security@apple.com","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2010-3864","sourceIdentifier":"secalert@redhat.com","published":"2010-11-17T16:00:01.763","lastModified":"2026-06-16T23:23:42.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography."},{"lang":"es","value":"Múltiples vulnerabilidades de condición de carrera en ssl/t1_lib.c en OpenSSL v0.9.8f a la v0.9.8o, v1.0.0, y v1.0.0a, cuando la multi-hilo la caché interna está activada en el servidor TLS, podría permitir a atacantes remotos ejecutar código de su elección a través de datos del cliente que provocan un desbordamiento de búfer basado en memoria dinámica (heap), relacionado con (1)el nombre de extensión del servidor TLS y (2) la curva elíptica criptográfica."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","baseScore":7.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"}]}]}],"references":[{"url":"http://blogs.sun.com/security/entry/cve_2010_3864_race_condition","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051170.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051237.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051255.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=129916880600544&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=130497251507577&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=132828103218869&w=2","source":"secalert@redhat.com"},{"url":"http://openssl.org/news/secadv_20101116.txt","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/42241","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42243","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42309","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42336","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42352","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42397","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42413","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/43312","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/44269","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-10:10.openssl.asc","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1024743","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668793","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4723","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.adobe.com/support/security/bulletins/apsb11-11.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2125","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/3041","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/3077","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/3097","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/3121","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=649304","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"secalert@redhat.com"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0888.html","source":"secalert@redhat.com"},{"url":"http://blogs.sun.com/security/entry/cve_2010_3864_race_condition","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051170.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051237.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051255.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=129916880600544&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497251507577&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=132828103218869&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/secadv_20101116.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/42241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/44269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.FreeBSD.org/advisories/FreeBSD-SA-10:10.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1024743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/security/bulletins/apsb11-11.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=649304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0888.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2010-4180","sourceIdentifier":"secalert@redhat.com","published":"2010-12-06T21:05:48.687","lastModified":"2026-06-16T23:24:18.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier."},{"lang":"es","value":"OpenSSL en versiones anteriores a 0.9.8q y 1.0.x en versiones anteriores a 1.0.0c, cuando SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG está habilitado, no previene adecuadamente la modificación del conjunto de cifrado en la caché de sesión, lo que permite a atacantes remotos forzar la degradación para un cifrado no destinado a través de vectores que involucran rastreo de tráfico de red para descubrir un identificador de sesión."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.8q","matchCriteriaId":"0447353B-C86F-466E-91DD-39D56D850E35"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.0c","matchCriteriaId":"FA2FAFBB-00A0-4546-8B36-6028D6706FD7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*","matchCriteriaId":"A2D59BD0-43DE-4E58-A057-640AB98359A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*","matchCriteriaId":"BDE52846-24EC-4068-B788-EC7F915FFF11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"87614B58-24AB-49FB-9C84-E8DDBA16353B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*","matchCriteriaId":"A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*","matchCriteriaId":"5646FDE9-CF21-46A9-B89D-F5BBDB4249AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*","matchCriteriaId":"DE554781-1EB9-446E-911F-6C11970C47F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:11.0:sp1:*:*:*:*:*:*","matchCriteriaId":"4500161F-13A0-4369-B93A-778B34E7F005"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp3:*:*:*:*:*:*","matchCriteriaId":"1E496249-23A8-42FC-A109-634A54B5600F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:*","matchCriteriaId":"4339DE06-19FB-4B8E-B6AE-3495F605AD05"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*","matchCriteriaId":"60FBDD82-691C-4D9D-B71B-F9AFF6931B53"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*","matchCriteriaId":"4CD2D897-E321-4CED-92E0-11A98B52053C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:-:*:*:*","matchCriteriaId":"79A35457-EAA3-4BF9-A4DA-B2E414A75A02"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:-:*:*:*","matchCriteriaId":"D1D7B467-58DD-45F1-9F1F-632620DF072A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.2","matchCriteriaId":"3E532D95-4A9F-47B1-979B-C116F7C7A73F"}]}]}],"references":[{"url":"http://cvs.openssl.org/chngview?cn=20131","source":"secalert@redhat.com","tags":["Broken Link","Patch"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html","source":"secalert@redhat.com","tags":["Broken Link","Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052027.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052315.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129916880600544&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497251507577&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=132077688910227&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv_20101202.txt","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://osvdb.org/69565","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/42469","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42473","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42493","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42571","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42620","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42811","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42877","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/43169","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/43170","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/43171","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/43172","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/43173","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/44269","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668471","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4723","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://ubuntu.com/usn/usn-1029-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2141","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:248","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0977.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0978.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0979.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/522176","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/45164","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1024822","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2010/3120","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2010/3122","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2010/3134","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2010/3188","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2011/0032","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2011/0076","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2011/0268","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=659462","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA53&actp=LIST","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18910","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://cvs.openssl.org/chngview?cn=20131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052315.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=129916880600544&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497251507577&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=132077688910227&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv_20101202.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://osvdb.org/69565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/42469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/42877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/43169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/43170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/43171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/43172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/43173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/44269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://ubuntu.com/usn/usn-1029-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2011/dsa-2141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0978.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0979.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/522176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/45164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1024822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2010/3120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2010/3122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2010/3134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2010/3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2011/0032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2011/0076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.vupen.com/english/advisories/2011/0268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=659462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA53&actp=LIST","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-4252","sourceIdentifier":"secalert@redhat.com","published":"2010-12-06T21:05:49.200","lastModified":"2026-06-16T23:24:26.547","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol."},{"lang":"es","value":"OpenSSL en versiones anteriores a la 1.0.0c, si J-PAKE está activado, no valida apropiadamente los parámetros públicos en el protocolo J-PAKE, lo que permite a atacantes remotos evitar la necesidad de saber el secreto compartido y validarse con éxito, enviando valores modificados en cada ronda del protocolo."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0b","matchCriteriaId":"C853DC68-EBC8-4617-8E2B-47CE65E3B10F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"}]}]}],"references":[{"url":"http://cvs.openssl.org/chngview?cn=20098","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=129916880600544&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=130497251507577&w=2","source":"secalert@redhat.com"},{"url":"http://openssl.org/news/secadv_20101202.txt","source":"secalert@redhat.com"},{"url":"http://seb.dbzteam.org/crypto/jpake-session-key-retrieval.pdf","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/42469","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1024823","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668471","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/45163","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/3120","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3122","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=659297","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://github.com/seb-m/jpake","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19039","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/chngview?cn=20098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=129916880600544&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497251507577&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/secadv_20101202.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seb.dbzteam.org/crypto/jpake-session-key-retrieval.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/42469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1024823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/45163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=659297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/seb-m/jpake","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7270","sourceIdentifier":"cve@mitre.org","published":"2010-12-06T22:30:31.827","lastModified":"2026-06-16T23:03:57.533","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier, a different vulnerability than CVE-2010-4180."},{"lang":"es","value":"OpenSSL en versiones anteriores a la 0.9.8j, si SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG está activado, no previene la modificación de sus datos en la caché de sesión, lo que permite a atacantes remotos forzar el uso de protocolos de cifrado deshabilitados a través de vectores de ataque que involucran la captura del tráfico de red para descubrir un identificador de sesión. Es una vulnerabilidad distinta a la CVE-2010-4180."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8i","matchCriteriaId":"B6CE592F-4550-4DA1-A6F9-5E9E72CB4238"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"}]}]}],"references":[{"url":"http://cvs.openssl.org/chngview?cn=17489","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=132077688910227&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42493","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://ubuntu.com/usn/usn-1029-1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0977.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0978.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/522176","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/45254","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=659462","source":"cve@mitre.org"},{"url":"http://cvs.openssl.org/chngview?cn=17489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=132077688910227&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://ubuntu.com/usn/usn-1029-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0977.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0978.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/522176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/45254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=659462","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-0014","sourceIdentifier":"secalert@redhat.com","published":"2011-02-19T01:00:01.777","lastModified":"2026-06-16T23:26:37.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka \"OCSP stapling vulnerability.\""},{"lang":"es","value":"ssl/t1_lib.c en OpenSSL v0.9.8h hasta v0.9.8q y v1.0.0 hasta v1.0.0c permite a atacantes remotos causar una denegación de servicio (por caída de la aplicación) y posiblemente obtener información sensible en las aplicaciones que utilizan OpenSSL, a través de un formato incorrecto de mensaje ClientHello que desencadena un acceso a memoria fuera de rango, también conocida como \"vulnerabilidad de grapado OCSP.\""}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"}]}]}],"references":[{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-002.txt.asc","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=130497251507577&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=131042179515633&w=2","source":"secalert@redhat.com"},{"url":"http://osvdb.org/70847","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/43227","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43286","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43301","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43339","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/44269","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.668823","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4723","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2011/dsa-2162","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:028","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20110208.txt","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0677.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/46264","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1025050","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1064-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2011/0361","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0387","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0389","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0395","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0399","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0603","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18985","source":"secalert@redhat.com"},{"url":"https://support.f5.com/csp/article/K10534046","source":"secalert@redhat.com"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-002.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497251507577&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=131042179515633&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/70847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/43339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/44269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.668823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2011/dsa-2162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20110208.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0677.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/46264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1025050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1064-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K10534046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7278","sourceIdentifier":"cve@mitre.org","published":"2011-03-18T16:55:01.407","lastModified":"2026-06-16T23:03:58.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The S/MIME feature in Open Ticket Request System (OTRS) before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly configure the RANDFILE environment variable for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available for cryptographic operations, related to inability to write to the seeding file."},{"lang":"es","value":"La función S/MIME en Open Ticket Request System (OTRS) anterior a v2.2.5, y v2.3.x anteriores a v2.3.0-beta1, no configura correctamente la variable de entorno RANDFILE para OpenSSL, lo que podría facilitar a los atacantes remotos descifrar  mensajes de correo electrónico que tenían menos entropía de la previsto para operaciones de cifrado, relacionado con la imposibilidad de escribir en el fichero de generación de semilla para claves."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"05789283-BD1A-4C3E-AD5F-9411D9216571"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta1:*:*:*:*:*:*","matchCriteriaId":"1985DCF5-4528-4246-B1E7-75703CF8849C"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta2:*:*:*:*:*:*","matchCriteriaId":"47EFAC2B-AB6C-4327-997C-9B10F7360163"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta3:*:*:*:*:*:*","matchCriteriaId":"5D25927B-BDD3-4A3C-901B-8F62C422D266"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta4:*:*:*:*:*:*","matchCriteriaId":"7134888F-1296-4AFD-8ECC-A1A2486C74AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta5:*:*:*:*:*:*","matchCriteriaId":"5F7F2EAA-0744-4BFA-AAEB-66515507BC34"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta6:*:*:*:*:*:*","matchCriteriaId":"B781EFF2-2502-4212-89DB-BF52DFBA41BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta7:*:*:*:*:*:*","matchCriteriaId":"4E4196EF-6C16-473C-9A71-A8FC728CD2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta8:*:*:*:*:*:*","matchCriteriaId":"9E00ACBC-60E5-44B7-961C-23CD1903112D"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"ACCB8907-B5F7-4C20-A6CE-C8D52F2D1DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C433CD8B-143A-4237-A54B-A9D4C27B061C"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"42D518B5-B9A9-4831-927C-104D2803533E"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2ACEE63A-4C9C-46F4-BF73-51C931C046BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6A81DFFC-99A6-4AFB-BD95-7202528B87CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3FC0F48B-5E12-4656-B848-2DC9A4F8D00C"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"EE262525-B533-46C9-B845-1F5214F6177F"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8371E67D-8784-4C0B-B577-2FBC051F8CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"6FF4CC40-2DB2-474B-ABC3-57EA268CACDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"13E9302A-1278-40B8-B2D4-FEB9BB276622"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9582CBC7-B5FA-467D-8F1B-AF9AB308F27C"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"EBAABF11-2B91-41DF-9564-E75D88AE43A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"824350BB-4C29-43FE-B205-22D36BE93731"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"C2C4825A-A860-4212-83EA-FE04B110A07C"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"C517953B-0B47-4B45-90DA-C9DCC8E2536A"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"C5C3344F-E284-477B-A322-ABF34AD80124"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DC14AEFD-7F68-4E64-9D23-A933352E74C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D95DB73E-D417-455F-A754-67555E86AD92"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CC0430A7-F27E-430C-9D9D-A4AE86C889D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A2278B3B-B9D6-4E67-B118-2B798C5F1432"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.3.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5186A3DD-7D17-4D2E-B756-EF1AD5C6B42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"3E7556D7-D593-4AF3-8D0E-7E10E1C5316A"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.3.0:beta3:*:*:*:*:*:*","matchCriteriaId":"05747F3E-27E8-4E04-B80D-D8C38FBDA4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.3.0:beta4:*:*:*:*:*:*","matchCriteriaId":"74CBA83A-443E-4B1D-85D2-55FFB2FEB782"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2F6FE3DE-6D43-404F-BCE8-861E0584AA18"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"BE712DC3-5CA0-4157-A501-483BBDBF7B0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"86CD9921-3CFC-49F7-9C91-5049E41ADD15"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A777AA53-6900-483D-8C31-F9C415DE9B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"53949C54-F416-46C6-A784-441880F0D8E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2896D75B-07EC-4224-9018-0BF55DE16379"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"A6607C7B-E121-4DCD-8FA0-5B202B97D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"4FBA783C-32B5-4264-9701-3843710499E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"1EB26560-C681-436F-9F41-D927C501791E"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"49CBB470-37A6-4D09-BA71-8EAB8931554E"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CF1D725C-CBE6-49A4-B6FC-3D80E35E0135"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63608BED-2700-4EF7-9038-B295FF373FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5386B686-3421-4F4E-AC5E-6567FE12E03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0E712714-6E03-43BA-B375-929638730B44"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"12B1D7F7-51C3-460E-BDE3-0C40B692B622"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EF9AEA70-9DC8-41B5-A4D4-F86828F9E35A"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E7BAB384-AC74-4D75-BFE2-8CBC2C0A830F"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E365F79A-BDDA-430D-B39F-FADADA91A0F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DC9223D9-B5F8-4D9A-98F8-5D73852B2E0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BC91C532-9CCD-4353-A6C3-E297A1F5BD77"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"6BAAB79E-8DC5-4BFF-9BD2-9215DA2B775D"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E9C7B601-0CBD-4861-855E-A4F64157A8D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"B715EC14-D79A-4CB4-A875-380F66A45C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"20C9C4DB-4E5D-4D01-B174-D6682831B184"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"6D25611D-231B-4CBA-8DC3-5F6CE90ADA56"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"01E9FF1B-AFFE-43C1-8E06-15DA8564D62F"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"ACE6A6EB-7264-4AE8-8CC4-994969E8B136"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FEEFDE04-B409-47BF-BF71-0C87A7A6893D"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"7ECC731E-7B47-4AAA-B009-E8CE73AE354A"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DADC404F-08B0-48A7-84DB-5270B8E1A147"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"091E423C-A9D5-4ED8-93C7-5CDD57DC3B00"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CAEC4E93-34C5-418B-B12C-CABE500D5171"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"75BE131A-342E-475C-9522-E53A8A8A1BA0"}]}]}],"references":[{"url":"http://bugs.otrs.org/show_bug.cgi?id=2539","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bugs.otrs.org/show_bug.cgi?id=2844","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807","source":"cve@mitre.org"},{"url":"http://bugs.otrs.org/show_bug.cgi?id=2539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://bugs.otrs.org/show_bug.cgi?id=2844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-5057","sourceIdentifier":"cve@mitre.org","published":"2011-03-18T16:55:01.547","lastModified":"2026-06-16T23:14:54.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The S/MIME feature in Open Ticket Request System (OTRS) before 2.3.4 does not configure the RANDFILE and HOME environment variables for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available for cryptographic operations, related to inability to write to the seeding file."},{"lang":"es","value":"La función S/MIME en Open Ticket Request System (OTRS) anterior a v2.3.4 no configura el RANDFILE y las variables de entorno HOME para OpenSSL, lo que podría facilitar a los atacantes remotos descifrar los mensajes de correo electrónico que tenían menos entropía de la prevista para las operaciones de cifrado, relacionado con la imposibilidad de escribir en el fichero de la generación de semillas para la clave."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.3","matchCriteriaId":"56272C04-B43A-4CAE-A12E-829A4000037E"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta1:*:*:*:*:*:*","matchCriteriaId":"1985DCF5-4528-4246-B1E7-75703CF8849C"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta2:*:*:*:*:*:*","matchCriteriaId":"47EFAC2B-AB6C-4327-997C-9B10F7360163"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta3:*:*:*:*:*:*","matchCriteriaId":"5D25927B-BDD3-4A3C-901B-8F62C422D266"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta4:*:*:*:*:*:*","matchCriteriaId":"7134888F-1296-4AFD-8ECC-A1A2486C74AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta5:*:*:*:*:*:*","matchCriteriaId":"5F7F2EAA-0744-4BFA-AAEB-66515507BC34"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta6:*:*:*:*:*:*","matchCriteriaId":"B781EFF2-2502-4212-89DB-BF52DFBA41BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta7:*:*:*:*:*:*","matchCriteriaId":"4E4196EF-6C16-473C-9A71-A8FC728CD2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:0.5:beta8:*:*:*:*:*:*","matchCriteriaId":"9E00ACBC-60E5-44B7-961C-23CD1903112D"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"ACCB8907-B5F7-4C20-A6CE-C8D52F2D1DE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C433CD8B-143A-4237-A54B-A9D4C27B061C"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"42D518B5-B9A9-4831-927C-104D2803533E"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2ACEE63A-4C9C-46F4-BF73-51C931C046BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6A81DFFC-99A6-4AFB-BD95-7202528B87CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3FC0F48B-5E12-4656-B848-2DC9A4F8D00C"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"EE262525-B533-46C9-B845-1F5214F6177F"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8371E67D-8784-4C0B-B577-2FBC051F8CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"6FF4CC40-2DB2-474B-ABC3-57EA268CACDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"13E9302A-1278-40B8-B2D4-FEB9BB276622"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9582CBC7-B5FA-467D-8F1B-AF9AB308F27C"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"EBAABF11-2B91-41DF-9564-E75D88AE43A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"824350BB-4C29-43FE-B205-22D36BE93731"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"C2C4825A-A860-4212-83EA-FE04B110A07C"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"C517953B-0B47-4B45-90DA-C9DCC8E2536A"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"C5C3344F-E284-477B-A322-ABF34AD80124"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DC14AEFD-7F68-4E64-9D23-A933352E74C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D95DB73E-D417-455F-A754-67555E86AD92"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CC0430A7-F27E-430C-9D9D-A4AE86C889D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A2278B3B-B9D6-4E67-B118-2B798C5F1432"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.3.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5186A3DD-7D17-4D2E-B756-EF1AD5C6B42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"3E7556D7-D593-4AF3-8D0E-7E10E1C5316A"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.3.0:beta3:*:*:*:*:*:*","matchCriteriaId":"05747F3E-27E8-4E04-B80D-D8C38FBDA4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.3.0:beta4:*:*:*:*:*:*","matchCriteriaId":"74CBA83A-443E-4B1D-85D2-55FFB2FEB782"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2F6FE3DE-6D43-404F-BCE8-861E0584AA18"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"BE712DC3-5CA0-4157-A501-483BBDBF7B0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"86CD9921-3CFC-49F7-9C91-5049E41ADD15"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A777AA53-6900-483D-8C31-F9C415DE9B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"53949C54-F416-46C6-A784-441880F0D8E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2896D75B-07EC-4224-9018-0BF55DE16379"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"A6607C7B-E121-4DCD-8FA0-5B202B97D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"4FBA783C-32B5-4264-9701-3843710499E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.0:beta6:*:*:*:*:*:*","matchCriteriaId":"1EB26560-C681-436F-9F41-D927C501791E"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"49CBB470-37A6-4D09-BA71-8EAB8931554E"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CF1D725C-CBE6-49A4-B6FC-3D80E35E0135"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63608BED-2700-4EF7-9038-B295FF373FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5386B686-3421-4F4E-AC5E-6567FE12E03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0E712714-6E03-43BA-B375-929638730B44"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"12B1D7F7-51C3-460E-BDE3-0C40B692B622"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"EF9AEA70-9DC8-41B5-A4D4-F86828F9E35A"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E7BAB384-AC74-4D75-BFE2-8CBC2C0A830F"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E365F79A-BDDA-430D-B39F-FADADA91A0F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DC9223D9-B5F8-4D9A-98F8-5D73852B2E0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BC91C532-9CCD-4353-A6C3-E297A1F5BD77"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"6BAAB79E-8DC5-4BFF-9BD2-9215DA2B775D"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E9C7B601-0CBD-4861-855E-A4F64157A8D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"B715EC14-D79A-4CB4-A875-380F66A45C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"20C9C4DB-4E5D-4D01-B174-D6682831B184"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"6D25611D-231B-4CBA-8DC3-5F6CE90ADA56"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"01E9FF1B-AFFE-43C1-8E06-15DA8564D62F"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.0:beta2:*:*:*:*:*:*","matchCriteriaId":"ACE6A6EB-7264-4AE8-8CC4-994969E8B136"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"FEEFDE04-B409-47BF-BF71-0C87A7A6893D"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"7ECC731E-7B47-4AAA-B009-E8CE73AE354A"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DADC404F-08B0-48A7-84DB-5270B8E1A147"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"091E423C-A9D5-4ED8-93C7-5CDD57DC3B00"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CAEC4E93-34C5-418B-B12C-CABE500D5171"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"75BE131A-342E-475C-9522-E53A8A8A1BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EF62E279-212F-40B4-B2B3-429D6A6164BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D6FEFC32-3880-4CEA-9AD1-B1669A3CACE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A0A9CD5E-655A-423B-805B-8953122D2509"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"64BCF69B-4DB6-423E-BCE9-7CAEA74B1568"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"9307C840-9EEE-4A23-8FAF-258D683E14A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"2A6F2752-5D88-4007-96C8-DFA1697B0AC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.3.0:beta1:*:*:*:*:*:*","matchCriteriaId":"29823A84-ACC0-410F-B2A5-C659C8F06625"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.3.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2BC10A3E-F32A-4A16-BDD2-930ADB973693"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.3.0:beta3:*:*:*:*:*:*","matchCriteriaId":"1D368E58-79AD-4C55-B867-A75FF3F98DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.3.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8AAF73C6-FCCE-43C7-BD67-F8CFC4EA3A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.3.0:rc1:*:*:*:*:*:*","matchCriteriaId":"09EF0162-5102-4F95-82CF-DF541B50858D"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55F536B9-11F6-4F3F-9293-25D23F987C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"CD6DF09D-A8D8-4C77-A4C9-46BD570C2CE1"}]}]}],"references":[{"url":"http://bugs.otrs.org/show_bug.cgi?id=3462","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807","source":"cve@mitre.org"},{"url":"http://bugs.otrs.org/show_bug.cgi?id=3462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://source.otrs.org/viewvc.cgi/otrs/CHANGES?revision=1.1807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-1468","sourceIdentifier":"cve@mitre.org","published":"2011-03-20T02:00:04.597","lastModified":"2026-06-16T23:29:24.187","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function."},{"lang":"es","value":"Múltiples fugas de memoria en la extensión OpenSSL de PHP anteriores a v5.3.6 podría permitir a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de (1) datos en texto plano sobre la  función openssl_encrypt o (2) Los datos de texto cifrado a la función openssl_decrypt."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3.5","matchCriteriaId":"675ACEA8-3364-4ABD-BDE0-621310435AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","matchCriteriaId":"AEEF2298-98E8-409F-9205-84817CEF947B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6AFC00BA-D64D-4407-AC69-FDD9FF013943"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"D80F2A8B-B57F-4970-867A-55E8187C1502"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"49965B80-DC27-4864-BDF0-CBBFF16BFD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BF57C14-86B6-419A-BAFF-93D01CB1E081"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5245F990-B4A7-4ED8-909D-B8137CE79FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5652D5B0-68E4-4239-B9B7-599AFCF4C53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57B71BB7-5239-4860-9100-8CABC3992D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B3F9DF9D-15E5-4387-ABE3-A7583331A928"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*","matchCriteriaId":"11579E5C-D7CF-46EE-B015-5F4185C174E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"221B9AC4-C63C-4386-B3BD-E4BC102C6124"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"BB25CFBB-347C-479E-8853-F49DD6CBD7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4D2937B3-D034-400E-84F5-33833CE3764D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"4C2AF1D9-33B6-4B2C-9269-426B6B720164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*","matchCriteriaId":"84B70263-37AA-4539-A286-12038A3792C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6FF30D7F-353B-4496-9A89-4EF2BB279E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DD97DF34-35AB-4979-96E2-B23DC8556A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:windows:*:*:*:*:*","matchCriteriaId":"F526115E-A68E-4B10-AA6A-9CD26CB81AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0892C89E-9389-4452-B7E0-981A763CD426"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"635F3CB1-B042-43CC-91AB-746098018D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"E1F32DDF-17A3-45B5-9227-833EBEBD3923"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*","matchCriteriaId":"2CDFB7E9-8510-430F-BFBC-FD811D60DC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*","matchCriteriaId":"79D5336A-14AA-483E-9CBE-A7B53120B925"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:*","matchCriteriaId":"3AADA875-E0EA-483A-A07E-2914FE969972"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.14:*:*:*:*:*:*:*","matchCriteriaId":"95D48A71-B84E-4B6C-9603-B3373052E568"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.15:*:*:*:*:*:*:*","matchCriteriaId":"CAAB7D55-F155-43F9-A563-F2E35CFFEF26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.16:*:*:*:*:*:*:*","matchCriteriaId":"72243A3F-6BFD-472B-9EA4-82BE4253ED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.17:*:*:*:*:*:*:*","matchCriteriaId":"E415CC22-09CA-47D2-9F1A-0BCA8960835B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9EF4B938-BB14-4C06-BEE9-10CA755C5DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"981C922C-7A7D-473E-8C43-03AB62FB5B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5D0CD11A-09C2-4C60-8F0C-68E55BD6EE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B0F40E4A-E125-4099-A8B3-D42614AA9312"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"4933D9DD-A630-4A3D-9D13-9E182F5F6F8C"}]}]}],"references":[{"url":"http://bugs.php.net/bug.php?id=54060","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://bugs.php.net/bug.php?id=54061","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT5002","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:053","source":"cve@mitre.org"},{"url":"http://www.php.net/ChangeLog-5.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1423.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/46977","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2011/0744","source":"cve@mitre.org"},{"url":"http://bugs.php.net/bug.php?id=54060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://bugs.php.net/bug.php?id=54061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1423.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/46977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-1945","sourceIdentifier":"secalert@redhat.com","published":"2011-05-31T20:55:05.267","lastModified":"2026-06-16T23:30:26.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA) is used for the ECDHE_ECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine private keys via a timing attack and a lattice calculation."},{"lang":"es","value":"El subsistema de criptografía de curva elíptica (ECC) de OpenSSL v1.0.0d y versiones anteriores, cuando el algoritmo de firma digital de la curva elímptica(ECDSA) se utiliza para el conjunto de cifrado ECDHE_ECDSA, no aplica adecuadamente las curvas sobre campos binarios, lo que hace que sea más fácil para el atacantes dependientes del contexto determinar las claves privadas a través de un ataque de oportunidad y un cálculo del entramado (lattice)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0d","matchCriteriaId":"5217BC49-DA27-4B87-B639-0C2DCC738773"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"}]}]}],"references":[{"url":"http://eprint.iacr.org/2011/232.pdf","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/44935","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5784","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2011/dsa-2309","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/536044","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-8FENZ3","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:136","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:137","source":"secalert@redhat.com"},{"url":"https://hermes.opensuse.org/messages/8760466","source":"secalert@redhat.com"},{"url":"https://hermes.opensuse.org/messages/8764170","source":"secalert@redhat.com"},{"url":"http://eprint.iacr.org/2011/232.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/44935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2011/dsa-2309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/536044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/MAPG-8FENZ3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hermes.opensuse.org/messages/8760466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hermes.opensuse.org/messages/8764170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-3207","sourceIdentifier":"secalert@redhat.com","published":"2011-09-22T10:55:03.477","lastModified":"2026-06-16T23:32:52.720","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past."},{"lang":"es","value":"crypto/x509/x509_vfy.c en OpenSSL v1.0.x  antes de v1.0.0e no inicializa algunos miembros de una estructura, lo que facilita a los atacantes remotos a la hora de evitar la validación de la CRL utilizando un valor nextUpdate que corresponde a un momento en el pasado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"}]}]}],"references":[{"url":"http://cvs.openssl.org/chngview?cn=21349","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065712.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065744.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133226187115472&w=2","source":"secalert@redhat.com"},{"url":"http://openssl.org/news/secadv_20110906.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/45956","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5784","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:137","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1409.html","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026012","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=736087","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/chngview?cn=21349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065712.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065744.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133226187115472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/secadv_20110906.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/45956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1409.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=736087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-3210","sourceIdentifier":"secalert@redhat.com","published":"2011-09-22T10:55:03.523","lastModified":"2026-06-16T23:32:53.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol."},{"lang":"es","value":"La efímera funcionalidad de cifrado ECDH en OpenSSL versiones v0.9.8 a v0.9.8s y v1.0.x antes de v1.0.0e no garantiza la seguridad de los subprocesos durante el procesamiento de los mensajes de 'handshake', lo que permite provocar una denegación de servicio (por caída de la aplicación) a atacantes remotos a través de mensajes 'desordenados' que violan el protocolo TLS."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"}]}]}],"references":[{"url":"http://cvs.openssl.org/chngview?cn=21337","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=132750648501816&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133226187115472&w=2","source":"secalert@redhat.com"},{"url":"http://openssl.org/news/secadv_20110906.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5784","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:137","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026012","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=736079","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/chngview?cn=21337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=132750648501816&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133226187115472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/secadv_20110906.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=736079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-4108","sourceIdentifier":"secalert@redhat.com","published":"2012-01-06T01:55:00.783","lastModified":"2026-06-16T23:34:26.383","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack."},{"lang":"es","value":"La implementación DTLS en OpenSSL antes de v0.9.8s y v1.x antes de v1.0.0f realiza una comprobación de MAC sólo si determinado relleno es válida, lo que facilita a los atacantes remotos a la hora de recuperar texto a través de un ataque de relleno."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8r","matchCriteriaId":"D22F36D1-6773-4D86-A9B7-69693EFAEFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:bogus:*:*:*:*:*:*","matchCriteriaId":"83C6B8F4-DA78-4E92-8660-5F20FCADD0DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0e","matchCriteriaId":"A0823F96-5158-4A55-BBB3-FA10868E9B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=132750648501816&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48528","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57260","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5784","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2390","source":"secalert@redhat.com"},{"url":"http://www.isg.rhul.ac.uk/~kp/dtls.pdf","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:006","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:007","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20120104.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://security.paloaltonetworks.com/CVE-2011-4108","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=132750648501816&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.isg.rhul.ac.uk/~kp/dtls.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20120104.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.paloaltonetworks.com/CVE-2011-4108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-4109","sourceIdentifier":"secalert@redhat.com","published":"2012-01-06T01:55:00.830","lastModified":"2026-06-16T23:34:26.567","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check."},{"lang":"es","value":"Una vulnerabilidad de doble liberación en OpenSSL v0.9.8 antes de v0.9.8s, cuando la opción X509_V_FLAG_POLICY_CHECK está activada, permite a atacantes remotos tener un impacto no especificado al provocar el fallo de un control de la política."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=132750648501816&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48528","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5784","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2390","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:006","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:007","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20120104.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72129","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=132750648501816&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20120104.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72129","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-4576","sourceIdentifier":"secalert@redhat.com","published":"2012-01-06T01:55:00.877","lastModified":"2026-06-16T23:35:04.543","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer."},{"lang":"es","value":"La implementación SSL v3.0 en OpenSSL antes de v0.9.8s y v1.x antes de v1.0.0f no inicializa correctamente las estructuras de datos para el relleno de bloques de cifrado, lo que podría permitir a atacantes remotos obtener información sensible descifrando los datos de rellenos enviados por uno de los extremos de la comunicación SSL."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8r","matchCriteriaId":"D22F36D1-6773-4D86-A9B7-69693EFAEFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:bogus:*:*:*:*:*:*","matchCriteriaId":"83C6B8F4-DA78-4E92-8660-5F20FCADD0DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0e","matchCriteriaId":"A0823F96-5158-4A55-BBB3-FA10868E9B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=132750648501816&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48528","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/55069","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5784","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2390","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:006","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:007","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20120104.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=132750648501816&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/55069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20120104.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2011-4577","sourceIdentifier":"secalert@redhat.com","published":"2012-01-06T01:55:00.957","lastModified":"2026-06-16T23:35:04.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers."},{"lang":"es","value":"OpenSSL antes de v0.9.8s y v1.x antes de v1.0.0f, cuando el soporte al RFC 3779 está habilitado, permite a atacantes remotos provocar una denegación de servicio (error de aserción) a través de un certificado X.509 que contiene la extensión de certificados de datos asociados con identificados de (1) bloques de direcciones IP o (2) Sistema Autónomo (AS)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8r","matchCriteriaId":"D22F36D1-6773-4D86-A9B7-69693EFAEFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:bogus:*:*:*:*:*:*","matchCriteriaId":"83C6B8F4-DA78-4E92-8660-5F20FCADD0DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0e","matchCriteriaId":"A0823F96-5158-4A55-BBB3-FA10868E9B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=132750648501816&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5784","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.openssl.org/news/secadv_20120104.txt","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=132750648501816&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openssl.org/news/secadv_20120104.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-4619","sourceIdentifier":"secalert@redhat.com","published":"2012-01-06T01:55:01.003","lastModified":"2026-06-16T23:35:09.417","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors."},{"lang":"es","value":"La implementación del servidor de criptografía SGC en OpenSSL antes de v0.9.8s y en v1.x antes de v1.0.0f no controla correctamente los reinicios de 'handshake' (apretón de manos), lo que permite a atacantes remotos provocar una denegación de servicio a través de vectores no especificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8r","matchCriteriaId":"D22F36D1-6773-4D86-A9B7-69693EFAEFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:bogus:*:*:*:*:*:*","matchCriteriaId":"83C6B8F4-DA78-4E92-8660-5F20FCADD0DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0e","matchCriteriaId":"A0823F96-5158-4A55-BBB3-FA10868E9B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=132750648501816&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133728068926468&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48528","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5784","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2390","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:006","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:007","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20120104.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=132750648501816&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133728068926468&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20120104.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2012-0027","sourceIdentifier":"secalert@redhat.com","published":"2012-01-06T01:55:01.050","lastModified":"2026-06-16T23:36:31.383","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client."},{"lang":"es","value":"El motor GOST en OpenSSL antes de v1.0.0f no controla correctamente los parámetros válidos para el cifrado de bloques GOST, lo que permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de datos de un cliente TLS específicamente modificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0e","matchCriteriaId":"A0823F96-5158-4A55-BBB3-FA10868E9B6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:bogus:*:*:*:*:*:*","matchCriteriaId":"83C6B8F4-DA78-4E92-8660-5F20FCADD0DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html","source":"secalert@redhat.com"},{"url":"http://osvdb.org/78191","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:007","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20120104.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/78191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20120104.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2012-0050","sourceIdentifier":"secalert@redhat.com","published":"2012-01-19T19:55:01.350","lastModified":"2026-06-16T23:36:34.493","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108."},{"lang":"es","value":"OpenSSL v0.9.8s y v1.0.0f no admite correctamente las aplicaciones DTLS, lo que permite a atacantes remotos provocar una denegación de servicio a través de vectores no especificados. NOTA: esta vulnerabilidad existe debido a una solución incorrecta para el CVE-2011-4108."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc","source":"secalert@redhat.com"},{"url":"http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03169289","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"secalert@redhat.com"},{"url":"http://osvdb.org/78320","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/47631","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/47677","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/47755","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48528","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5784","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2392","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:011","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20120118.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/51563","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026548","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03169289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/78320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/47631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/47677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/47755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20120118.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/51563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-4354","sourceIdentifier":"secalert@redhat.com","published":"2012-01-27T00:55:01.033","lastModified":"2026-06-16T23:34:49.963","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"crypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving ECDH or ECDHE cipher suites, uses an incorrect modular reduction algorithm in its implementation of the P-256 and P-384 NIST elliptic curves, which allows remote attackers to obtain the private key of a TLS server via multiple handshake attempts."},{"lang":"es","value":"crypto/bn/bn_nist.c en OpenSSL anterior a v0.9.8h en plataformas de 32 bits, como se utiliza en stunnel y otros productos, en determinadas circunstancias, la participación ECDH o suites ECDHE cifrado, utiliza un algoritmo de reducción incorrecta modular en la aplicación de la P-256 y P 384-NIST elíptica curvas, lo que permite a atacantes remotos obtener la clave privada de un servidor de TLS a través de múltiples intentos de apretón de manos."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:x86:*","versionEndIncluding":"0.9.8g","matchCriteriaId":"9AEAB1A1-9613-449E-BCF4-3DE365582EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:x86:*","matchCriteriaId":"738E2D3C-1C7D-4F85-B0DE-608BB5059337"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:x86:*","matchCriteriaId":"140B617A-2414-4D1A-98A4-3CA8D76F5122"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:x86:*","matchCriteriaId":"99EBBB96-8089-4A3C-BD30-9684823B42E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:x86:*","matchCriteriaId":"3B39A92A-C78D-4007-9FFF-BF37949793F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:x86:*","matchCriteriaId":"A29D0ACA-711C-4E8B-9604-68889E05EE2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:x86:*","matchCriteriaId":"D1CB6460-8A55-4C5E-BEB5-153697A82A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:x86:*","matchCriteriaId":"F3372BA6-62FD-434F-89EB-11B63114A1E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:x86:*","matchCriteriaId":"A007DA0C-4269-4E36-9082-097CEB76E65D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:x86:*","matchCriteriaId":"B7B9FF7F-E455-4774-94C2-1A456CA9E732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:x86:*","matchCriteriaId":"21EB68D7-DFC7-4EE4-A316-6088800885F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:x86:*","matchCriteriaId":"4414272F-3D22-4C84-884D-5FB803CC7CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:x86:*","matchCriteriaId":"392AAE2E-16F7-4454-BD0C-9D850234370C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:x86:*","matchCriteriaId":"CB0A2D5D-019A-4E62-9FC0-663E0866DFE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:x86:*","matchCriteriaId":"0B4F12DC-85F2-4A7B-B13A-876DEDA1DD2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:x86:*","matchCriteriaId":"E53DAA27-F643-4129-B0C7-7480C6970A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:x86:*","matchCriteriaId":"6DAE038E-4051-4B41-960C-7692EF5B1EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:x86:*","matchCriteriaId":"9B929792-45CC-4D23-B598-2759FD9745E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:x86:*","matchCriteriaId":"4D38BAC5-5DAC-4D01-8DC1-E220D770FBD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:x86:*","matchCriteriaId":"51B2B652-5BAE-4FB2-8A29-8A6024298FEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:x86:*","matchCriteriaId":"68BCE929-22C4-49AB-A8A4-6D4CE9810538"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:x86:*","matchCriteriaId":"454F3308-7579-4A10-9468-B083BAD0F888"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:x86:*","matchCriteriaId":"1C844D0A-9CDD-4776-BF63-35D3BFBABC20"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:x86:*","matchCriteriaId":"49AADE06-D464-49E3-892C-900F216AD23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:x86:*","matchCriteriaId":"92D0FD74-AF88-4947-A90F-1CD17D628ABE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:x86:*","matchCriteriaId":"D63F3A33-0E25-4CA0-82F1-51E9A8457A17"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:x86:*","matchCriteriaId":"26C8F4C9-3E87-4196-B074-6DEB60ACD4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:x86:*","matchCriteriaId":"724B5C08-89FB-4EE6-8710-09AA21955ED2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:x86:*","matchCriteriaId":"A129E1C4-5673-4600-8BEE-315AC8AAE569"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:x86:*","matchCriteriaId":"5EA07221-5828-4383-BE25-6CD991047879"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:x86:*","matchCriteriaId":"F2FC5631-F631-44A7-B2DC-AA76F4DE186D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:x86:*","matchCriteriaId":"F20B2F90-78FC-413A-9066-3BD5252764A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:x86:*","matchCriteriaId":"E7B90CD7-797F-4B4C-9017-3EFB29CAE66B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:x86:*","matchCriteriaId":"FF3D7D8E-BDD6-46CA-88A3-81D9E197299B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:x86:*","matchCriteriaId":"5603FF96-C5BA-46E4-8586-17ADD67F28C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:x86:*","matchCriteriaId":"A45D0D8B-00EB-445F-B5B9-ABB49684AE0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:x86:*","matchCriteriaId":"53EAA2F9-E32D-4476-959D-1B4F6C07A8FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:x86:*","matchCriteriaId":"2C19BC02-0004-44C2-951D-AE24F992CC72"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:x86:*","matchCriteriaId":"ABB67EE9-3B97-491F-9A76-7B1F00AAC3F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:x86:*","matchCriteriaId":"F9170AB7-15F2-4D29-9E50-5AF0FF08AA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:x86:*","matchCriteriaId":"393756F1-E618-44AC-848E-5CEE72332A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:x86:*","matchCriteriaId":"B092333E-EAEC-4194-BB48-3952B1C8D3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:x86:*","matchCriteriaId":"491A8371-4E99-4AA0-853A-A8C681F8F871"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:x86:*","matchCriteriaId":"9CC396FC-BB44-4D9D-B86C-AACCAC41C956"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:x86:*","matchCriteriaId":"65C2EBFE-7DAD-48C9-91B4-734EFF8AAD44"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:x86:*","matchCriteriaId":"6058CD3A-5957-423D-A5C2-CD19EB465078"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:x86:*","matchCriteriaId":"A1CE22A9-37AF-4D08-88FE-FCFFA5478B3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:x86:*","matchCriteriaId":"945593B5-7886-464C-A180-36179093F12A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:x86:*","matchCriteriaId":"19ED47E7-7265-4E7D-BC9E-9D1A2D570C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:x86:*","matchCriteriaId":"8E80A932-709F-4E7C-8FBD-07AC16BA3576"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:x86:*","matchCriteriaId":"D5E0635E-7C2B-4A6B-B645-A54548691EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:x86:*","matchCriteriaId":"7E78DB14-F04C-44E7-BAC3-41CD1640C763"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:x86:*","matchCriteriaId":"B34623C1-9953-4775-B3F6-3313A3168184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:x86:*","matchCriteriaId":"863F69F8-E46B-4C9E-835D-A7CECBCD013A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:x86:*","matchCriteriaId":"B9F78319-7FA2-452F-8909-C4DD125D3484"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:x86:*","matchCriteriaId":"13AE346B-7723-4FB9-A14E-5AEA933934BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:x86:*","matchCriteriaId":"7596B2B9-6F2B-4A83-9B29-5D4153936E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:x86:*","matchCriteriaId":"BB25C8AF-BE70-4EEE-A2CC-F3D8FF9A80B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:x86:*","matchCriteriaId":"0B679997-5497-428A-9CBB-28BE6B49EF85"}]}]}],"references":[{"url":"http://crypto.di.uminho.pt/CACE/CT-RSA2012-openssl-src.zip","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/filediff?f=openssl/crypto/bn/bn_nist.c&v1=1.14&v2=1.21","source":"secalert@redhat.com"},{"url":"http://eprint.iacr.org/2011/633","source":"secalert@redhat.com"},{"url":"http://marc.info/?t=119271238800004","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2011/12/01/6","source":"secalert@redhat.com"},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1593&user=guest&pass=guest","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2390","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=757909","source":"secalert@redhat.com"},{"url":"http://crypto.di.uminho.pt/CACE/CT-RSA2012-openssl-src.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.openssl.org/filediff?f=openssl/crypto/bn/bn_nist.c&v1=1.14&v2=1.21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://eprint.iacr.org/2011/633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?t=119271238800004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2011/12/01/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rt.openssl.org/Ticket/Display.html?id=1593&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=757909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-7248","sourceIdentifier":"secalert@redhat.com","published":"2012-02-29T11:55:00.817","lastModified":"2023-11-07T01:59:59.577","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-7250, CVE-2012-1410.  Reason: this candidate was intended for one issue, but CVE users may have associated it with multiple unrelated issues. Notes: All CVE users should consult CVE-2006-7250 for the OpenSSL candidate or CVE-2012-1410 for the Kadu candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2006-7249","sourceIdentifier":"secalert@redhat.com","published":"2012-02-29T11:55:01.440","lastModified":"2023-11-07T01:59:59.840","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-7250, CVE-2012-1410.  Reason: this candidate was intended for one issue, but CVE users may have associated it with multiple unrelated issues. Notes: All CVE users should consult CVE-2006-7250 for the OpenSSL candidate or CVE-2012-1410 for the Kadu candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2006-7250","sourceIdentifier":"secalert@redhat.com","published":"2012-02-29T11:55:04.893","lastModified":"2026-06-16T22:34:39.750","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message."},{"lang":"es","value":"La función mime_hdr_cmp en crypto/asn1/asn_mime.c en OpenSSL v0.9.8t y anteriores permite a atacantes remotos causar una denegación de servicio (desreferencia a puntero nulo y caída de la aplicación) a través de un mensaje S/MIME modificado para tal fin."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8t","matchCriteriaId":"696376CD-ED8A-4086-AD60-C0D5F6999F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","matchCriteriaId":"6AEBE689-3952-46F0-BACA-BB03041C6D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"}]}]}],"references":[{"url":"http://cvs.openssl.org/chngview?cn=22144","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=133728068926468&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=openssl-dev&m=115685408414194&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36533","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48153","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48516","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48899","source":"secalert@redhat.com"},{"url":"http://www.mail-archive.com/openssl-dev%40openssl.org/msg30305.html","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/02/27/10","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/02/28/14","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52181","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1424-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=748738","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=798100","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://cvs.openssl.org/chngview?cn=22144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=133728068926468&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=openssl-dev&m=115685408414194&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/36533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/openssl-dev%40openssl.org/msg30305.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/02/27/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/02/28/14","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1424-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=748738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=798100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}],"evaluatorComment":"Per: http://cwe.mitre.org/data/definitions/476.html\r\n\r\n'CWE-476: NULL Pointer Dereference'"}},{"cve":{"id":"CVE-2012-0884","sourceIdentifier":"secalert@redhat.com","published":"2012-03-13T03:12:26.243","lastModified":"2026-06-16T23:38:27.370","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack."},{"lang":"es","value":"La implementación de Cryptographic Message Syntax (CMS) y PKCS #7 de OpenSSL anteriores a 0.9.8u y 1.x anteriores a 1.0.0h no restringe apropiadamente un determinado uso de información posterior (\"oracle behavior\"), lo que facilita a atacantes dependientes del contexto desencriptar datos a través de un ataque de tipo \"Million Message Attack (MMA) adaptive chosen ciphertext\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8t","matchCriteriaId":"696376CD-ED8A-4086-AD60-C0D5F6999F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.0b:*:*:*:*:*:*:*","matchCriteriaId":"FE4F6317-358E-4BFA-B826-DE1FEA965808"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1b:*:*:*:*:*:*:*","matchCriteriaId":"E9C775A5-0E14-4BB4-8664-EFAF8E3B70FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077221.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077666.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133728068926468&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0426.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0488.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0531.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48580","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48895","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48916","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2454","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.openssl.org/news/secadv_20120312.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://downloads.avaya.com/css/P8/documents/100162507","source":"secalert@redhat.com"},{"url":"https://hermes.opensuse.org/messages/14330767","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077666.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133728068926468&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0426.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0488.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0531.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openssl.org/news/secadv_20120312.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://downloads.avaya.com/css/P8/documents/100162507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hermes.opensuse.org/messages/14330767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1165","sourceIdentifier":"secalert@redhat.com","published":"2012-03-15T17:55:00.977","lastModified":"2026-06-16T23:39:10.003","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250."},{"lang":"es","value":"La función mime_param_cmp en crypto/asn1/asn_mime.c en OpenSSL anteriores v0.9.8u y v1.x v1.0.0h permite atacantes remotos provocar una denegación de servicio (desreferenciación de punterio NULL y caída de aplicación) a través de mensaje S/MIME manipulado, es una vulnerabilidad distinta a CVE-2006-7250."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8t","matchCriteriaId":"696376CD-ED8A-4086-AD60-C0D5F6999F80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","matchCriteriaId":"6AEBE689-3952-46F0-BACA-BB03041C6D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"}]}]}],"references":[{"url":"http://cvs.openssl.org/chngview?cn=22252","source":"secalert@redhat.com"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077221.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077666.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133728068926468&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0426.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0488.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0531.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48580","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48895","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48899","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2454","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/03/12/3","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/03/12/6","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/03/12/7","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/03/13/2","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52764","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026787","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1424-1","source":"secalert@redhat.com"},{"url":"https://downloads.avaya.com/css/P8/documents/100162507","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/chngview?cn=22252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077086.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077666.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133728068926468&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0426.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0488.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0531.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/03/12/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/03/12/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/03/12/7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/03/13/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1424-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://downloads.avaya.com/css/P8/documents/100162507","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-2110","sourceIdentifier":"secalert@redhat.com","published":"2012-04-19T17:55:01.253","lastModified":"2026-06-16T23:41:00.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key."},{"lang":"es","value":"La función asn1_d2i_read_bio en OpenSSL antes de v0.9.8v, en v1.0.0 antes de v1.0.0i y en v1.0.1 antes de v1.0.1a no interpreta correctamente los enteros, lo que permite realizar ataques de desbordamiento de buffer a atacantes remotos, y provocar una denegación de servicio (por corrupción de memoria) o posiblemente tener un impacto no especificado, a través de datos DER debidamente modificados, como lo demuestra un certificado X.509 o una clave pública RSA."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8u","matchCriteriaId":"C3C9344D-F390-4003-93D1-013A9F521A17"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","matchCriteriaId":"6AEBE689-3952-46F0-BACA-BB03041C6D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*","matchCriteriaId":"499E52F3-4B34-4C47-8ABF-292928EBAA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*","matchCriteriaId":"2B8C80A1-D1E7-42D4-8DBC-CB7637D7598E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*","matchCriteriaId":"3EB3990A-3457-4CD6-9EEC-F2D4BC143932"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:*:*:*:*:*:*","matchCriteriaId":"06110A61-8857-46D5-BEE1-882197756DED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2012-04/0209.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://cvs.openssl.org/chngview?cn=22431","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/chngview?cn=22434","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/chngview?cn=22439","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079149.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079299.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080176.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00014.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00015.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00007.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133728068926468&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"secalert@redhat.com"},{"url":"http://osvdb.org/81223","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0518.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0522.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48847","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48895","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48899","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48942","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48999","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5784","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2454","source":"secalert@redhat.com"},{"url":"http://www.exploit-db.com/exploits/18756","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:060","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20120419.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/53158","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026957","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1424-1","source":"secalert@redhat.com"},{"url":"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862","source":"secalert@redhat.com"},{"url":"https://kb.juniper.net/KB27376","source":"secalert@redhat.com"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2012-04/0209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://cvs.openssl.org/chngview?cn=22431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.openssl.org/chngview?cn=22434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.openssl.org/chngview?cn=22439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079149.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080176.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133728068926468&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/81223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0518.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0522.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/18756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20120419.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/53158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1424-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.juniper.net/KB27376","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-2131","sourceIdentifier":"secalert@redhat.com","published":"2012-04-24T20:55:02.970","lastModified":"2026-06-16T23:41:03.197","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110."},{"lang":"es","value":"Múltiples errores de signo en enteros en crypto/buffer/buffer.c en OpenSSL v0.9.8v permite a atacantes remotos realizar ataques de desbordamiento de buffer, y provocar una denegación de servicio (corrupción de memoria) o posiblemente tener otro impacto no especificado, a través de datos DER modificados, como se demuestra con un certificado X.509 o una clave pública RSA. NOTA: esta vulnerabilidad existe debido a una solución incompleta para CVE-2012-2110."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*","matchCriteriaId":"A7540155-3629-4C76-9C67-8A8E0C1067F1"}]}]}],"references":[{"url":"http://cvs.openssl.org/chngview?cn=22479","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00014.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00015.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00007.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=133728068926468&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48895","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48956","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57353","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5784","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2454","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:064","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20120424.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/04/24/1","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/53212","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026957","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1428-1","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/75099","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/chngview?cn=22479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133728068926468&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134039053214295&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20120424.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/04/24/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/53212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1428-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/75099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-2333","sourceIdentifier":"secalert@redhat.com","published":"2012-05-14T22:55:03.070","lastModified":"2026-06-16T23:41:22.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation."},{"lang":"es","value":"Desbordamiento de entero en OpenSSL anteriores a v0.9.8x, v1.0.0 anteriores a v1.0.0j, y v1.0.1 anteriores a v1.0.1c, cuando TLS v1.1, TLS v1.2, o DTLS es usado con cifrado CBC, permite a atacantes remotos a provocar una denegación de servicio (sobre escritura del búfer) o posiblemente tener otros impactos no determinados a través de paquetes TLS manipulados que no son gestionados de forma adecuada en ciertos cálculos de vectores IV concretos."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8w","matchCriteriaId":"14672B30-A838-4BCE-935D-F8261F0A43EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","matchCriteriaId":"6AEBE689-3952-46F0-BACA-BB03041C6D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*","matchCriteriaId":"499E52F3-4B34-4C47-8ABF-292928EBAA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*","matchCriteriaId":"D530BE19-ADCF-4B5C-99E0-2B9A1DE7717F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*","matchCriteriaId":"A7540155-3629-4C76-9C67-8A8E0C1067F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*","matchCriteriaId":"2B8C80A1-D1E7-42D4-8DBC-CB7637D7598E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*","matchCriteriaId":"3EB3990A-3457-4CD6-9EEC-F2D4BC143932"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:*:*:*:*:*:*","matchCriteriaId":"06110A61-8857-46D5-BEE1-882197756DED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"}]}]}],"references":[{"url":"http://cvs.openssl.org/chngview?cn=22538","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/chngview?cn=22547","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081460.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00019.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00020.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=134919053717161&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=136432043316835&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0699.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/49116","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/49208","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/49324","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/50768","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/51312","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5784","source":"secalert@redhat.com"},{"url":"http://www.cert.fi/en/reports/2012/vulnerability641549.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2475","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:073","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20120510.txt","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/53476","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1027057","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=820686","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/75525","source":"secalert@redhat.com"},{"url":"http://cvs.openssl.org/chngview?cn=22538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.openssl.org/chngview?cn=22547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081460.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=134919053717161&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136432043316835&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0699.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1306.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-1308.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/49116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/49208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/49324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/50768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/51312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.fi/en/reports/2012/vulnerability641549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20120510.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/53476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1027057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=820686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/75525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-1473","sourceIdentifier":"cve@mitre.org","published":"2012-06-16T21:55:02.437","lastModified":"2026-06-16T23:29:24.833","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-5094.  NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment"},{"lang":"es","value":"** EN DISPUTA ** OpenSSL anterior a v0.9.8l y v0.9.8m a través de 1.x, no restringen adecuadamente por el cliente dentro de la renegociación de los protocolos SSL y TLS, lo que podría hacer más fácil para los atacantes remotos causar una denegación de servicio (el consumo de CPU) mediante la realización de las renegociaciones de muchos dentro de una sola conexión, una vulnerabilidad diferente a CVE-2011-5094. NOTA: también se puede argumentar que es la responsabilidad de las implementaciones de servidores, no una biblioteca de seguridad, para prevenir o limitar la renegociación cuando es inapropiado dentro de un entorno específico."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","matchCriteriaId":"6AEBE689-3952-46F0-BACA-BB03041C6D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*","matchCriteriaId":"499E52F3-4B34-4C47-8ABF-292928EBAA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*","matchCriteriaId":"D530BE19-ADCF-4B5C-99E0-2B9A1DE7717F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*","matchCriteriaId":"A7540155-3629-4C76-9C67-8A8E0C1067F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*","matchCriteriaId":"419BBCCD-6F8A-418A-BA02-56267B11D948"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*","matchCriteriaId":"8A3A2AF8-C7DD-43D0-B03F-37E7EB735C1D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8k","matchCriteriaId":"EB35F63F-7856-42EE-87A6-7EC7F10C2032"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-02/0061.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"cve@mitre.org"},{"url":"http://orchilles.com/2011/03/ssl-renegotiation-dos.html","source":"cve@mitre.org"},{"url":"http://vincent.bernat.im/en/blog/2011-ssl-dos-mitigation.html","source":"cve@mitre.org"},{"url":"http://www.educatedguesswork.org/2011/10/ssltls_and_computational_dos.html","source":"cve@mitre.org"},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg07553.html","source":"cve@mitre.org"},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg07564.html","source":"cve@mitre.org"},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg07567.html","source":"cve@mitre.org"},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg07576.html","source":"cve@mitre.org"},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg07577.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2011/07/08/2","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=707065","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/142b93d261e8ac7c5ceffdce848d622404abc1c286bbc999f43a9e10%40%3Cdev.rocketmq.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/6121becfdd23f9aeb675d5db80616536277d5931d6cde9dca292e509%40%3Cdev.rocketmq.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/8be38d35654441140db8eb3f7433524b3653ac3fdc26e2fa94626a3a%40%3Cdev.rocketmq.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r13a07a09f98b2841193dbf17a47c7f09b464e0747a1d3e7298ad4c81%40%3Cdev.rocketmq.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r1e33410bb5c81536e7fe14b51fa83e7bfd9445db61fd10c134792bde%40%3Cdev.rocketmq.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r298a09a2b98446b27217d719e877c643b6d13fac0bcafe04696a446b%40%3Cdev.rocketmq.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r3822ad69442291562c2ab41132fc49780d269e8b52deb458b7060f6d%40%3Ccommits.rocketmq.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5e595b91f00613dafa635852121d45b161e8b5c3eba4551aeccc6483%40%3Cdev.rocketmq.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r77fe575893261889b983e067293be72fa1f8c6305ede9fdbc404c514%40%3Cdev.rocketmq.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8680f41bcdad13c3f267cb868b45e5fb1f57df8b39d25193f7d66500%40%3Cdev.rocketmq.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/ra95c355827b3c96c8013ed8e0666c851581651be2524f3d28cd4fe71%40%3Cdev.rocketmq.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rc98eaa3f8223ac75aa5969f717954d8cbc9f3a9d8b7a6156a54fa557%40%3Cdev.rocketmq.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf9e8ae0356af3ec4f7780ca651b770721d287d4d55f62f4f754e0a6f%40%3Cdev.rocketmq.apache.org%3E","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-02/0061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=133951357207000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://orchilles.com/2011/03/ssl-renegotiation-dos.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://vincent.bernat.im/en/blog/2011-ssl-dos-mitigation.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.educatedguesswork.org/2011/10/ssltls_and_computational_dos.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg07553.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg07564.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg07567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg07576.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ietf.org/mail-archive/web/tls/current/msg07577.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2011/07/08/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=707065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/142b93d261e8ac7c5ceffdce848d622404abc1c286bbc999f43a9e10%40%3Cdev.rocketmq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/6121becfdd23f9aeb675d5db80616536277d5931d6cde9dca292e509%40%3Cdev.rocketmq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/8be38d35654441140db8eb3f7433524b3653ac3fdc26e2fa94626a3a%40%3Cdev.rocketmq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r13a07a09f98b2841193dbf17a47c7f09b464e0747a1d3e7298ad4c81%40%3Cdev.rocketmq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r1e33410bb5c81536e7fe14b51fa83e7bfd9445db61fd10c134792bde%40%3Cdev.rocketmq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r298a09a2b98446b27217d719e877c643b6d13fac0bcafe04696a446b%40%3Cdev.rocketmq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r3822ad69442291562c2ab41132fc49780d269e8b52deb458b7060f6d%40%3Ccommits.rocketmq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5e595b91f00613dafa635852121d45b161e8b5c3eba4551aeccc6483%40%3Cdev.rocketmq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r77fe575893261889b983e067293be72fa1f8c6305ede9fdbc404c514%40%3Cdev.rocketmq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8680f41bcdad13c3f267cb868b45e5fb1f57df8b39d25193f7d66500%40%3Cdev.rocketmq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/ra95c355827b3c96c8013ed8e0666c851581651be2524f3d28cd4fe71%40%3Cdev.rocketmq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rc98eaa3f8223ac75aa5969f717954d8cbc9f3a9d8b7a6156a54fa557%40%3Cdev.rocketmq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf9e8ae0356af3ec4f7780ca651b770721d287d4d55f62f4f754e0a6f%40%3Cdev.rocketmq.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-5095","sourceIdentifier":"cve@mitre.org","published":"2012-06-20T17:55:01.667","lastModified":"2026-06-16T23:35:56.253","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-1923."},{"lang":"es","value":"La implementación de intercambio de claves Diffie-Hellman en OpenSSL v0.9.8, cuando estaba habilitado FIPS, no valida correctamente un parámetro público, lo que hace que sea más facil a atacantes man-in-the-middle el obtener la clave compartida modificando el tráfico de red. Se trata de un problema relacionado con el CVE-2011-1923."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"}]}]}],"references":[{"url":"http://www.cl.cam.ac.uk/~rja14/Papers/psandqs.pdf","source":"cve@mitre.org"},{"url":"http://www.nessus.org/plugins/index.php?view=single&id=53360","source":"cve@mitre.org"},{"url":"https://discussions.nessus.org/thread/3381","source":"cve@mitre.org"},{"url":"http://www.cl.cam.ac.uk/~rja14/Papers/psandqs.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nessus.org/plugins/index.php?view=single&id=53360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://discussions.nessus.org/thread/3381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-4302","sourceIdentifier":"secalert@redhat.com","published":"2012-07-11T10:26:10.907","lastModified":"2026-06-16T23:34:43.993","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate."},{"lang":"es","value":"mnet/xmlrpc/client.php en MNET en Moodle v1.9.x antes de v1.9.14, v2.0.x antes de v2.0.5,  v2.1.2 antes de v2.1.x, no procesa correctamente el valor de retorno de la función openssl_verify, lo que permite a atacantes remotos evitar la validación a través de un certificado modificado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F24649-B67F-4809-9F54-7B623AEF5A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"DBD062EB-1B1F-4DC8-A4F9-C2EC7D401E9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"291F73E9-1059-4E7F-860F-0DF2A35AA456"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"0EB5859E-0996-46B5-BB44-34BD6EACBCF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.8:*:*:*:*:*:*:*","matchCriteriaId":"F87F6707-99AB-478A-909D-1D87298D5514"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.9:*:*:*:*:*:*:*","matchCriteriaId":"4BCE8B26-58BB-471C-B291-E6AE22B96C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.10:*:*:*:*:*:*:*","matchCriteriaId":"768CE5AF-955B-4148-998A-A46BBDBA618B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.11:*:*:*:*:*:*:*","matchCriteriaId":"4283440F-9B21-4CE9-81FF-79DF3DEDCEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.12:*:*:*:*:*:*:*","matchCriteriaId":"A989FADA-89C3-472B-86BF-0630D1CBBCA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.9.13:*:*:*:*:*:*:*","matchCriteriaId":"4FAF84CB-46F1-4F37-BBAC-1CED0600B5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DD248A1D-CACC-4E76-925A-078B736442AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9B8A0403-0869-495F-B7C0-13A387549C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"39791F43-CF89-485B-AA8B-634C282BB025"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"428E4846-8C9E-4592-8437-88FCDCED704D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A4096977-3258-48B0-9C7B-D43FBC8BB1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"18C6F348-DAE9-4440-8B3A-8D92ADC6606F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"367537BF-CBDF-4CBB-91B4-6E5A567EF605"}]}]}],"references":[{"url":"http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=54941685e3e86ec085641dcb7ebb1f96f06735b2","source":"secalert@redhat.com"},{"url":"http://moodle.org/mod/forum/discuss.php?d=188314","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=747444","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=54941685e3e86ec085641dcb7ebb1f96f06735b2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://moodle.org/mod/forum/discuss.php?d=188314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=747444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2012-6113","sourceIdentifier":"secalert@redhat.com","published":"2013-01-19T21:55:01.370","lastModified":"2026-06-16T23:47:51.040","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The openssl_encrypt function in ext/openssl/openssl.c in PHP 5.3.9 through 5.3.13 does not initialize a certain variable, which allows remote attackers to obtain sensitive information from process memory by providing zero bytes of input data."},{"lang":"es","value":"La función openssl_encrypt en ext/openssl/openssl.c en PHP v5.3.9 hasta v5.3.13 no inicia una cierta variable, que permite ataques para obtener información de procesos en memoria proporcionando cero bytes de entrada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.9:*:*:*:*:*:*:*","matchCriteriaId":"EC3F1891-032D-409C-904C-A415D2323DFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.10:*:*:*:*:*:*:*","matchCriteriaId":"4B13826D-06B2-4A46-AB24-092F6935958D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.11:*:*:*:*:*:*:*","matchCriteriaId":"1B6528FC-51BE-4E30-B282-D9841553BA26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.12:*:*:*:*:*:*:*","matchCriteriaId":"66CF9452-6225-4726-822B-C7CD620A1D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.13:*:*:*:*:*:*:*","matchCriteriaId":"A953FF53-1106-42D3-BE4A-4F27C7C42F52"}]}]}],"references":[{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=270a406ac94b5fc5cc9ef59fc61e3b4b95648a3e","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2013/01/18/6","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1702-1","source":"secalert@redhat.com"},{"url":"https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1099793","source":"secalert@redhat.com"},{"url":"https://bugs.php.net/bug.php?id=61413","source":"secalert@redhat.com"},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=270a406ac94b5fc5cc9ef59fc61e3b4b95648a3e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2013/01/18/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1702-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1099793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.php.net/bug.php?id=61413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-2686","sourceIdentifier":"secalert@redhat.com","published":"2013-02-08T19:55:00.890","lastModified":"2026-06-16T23:41:52.680","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data."},{"lang":"es","value":"crypto/evp/e_aes_cbc_hmac_sha1.c en la funcionalidad AES-NI en el TLS v1.1 y v1.2 en las implementaciones OpenSSL v1.0.1d antes de v1.0.1 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de los datos de CBC artesanales."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"}]}]}],"references":[{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=125093b59f3c2a2d33785b5563d929d0472f1721","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=137545771702053&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/55108","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/55139","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5880","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20130204.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/57755","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=908029","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18868","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19660","source":"secalert@redhat.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001","source":"secalert@redhat.com"},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=125093b59f3c2a2d33785b5563d929d0472f1721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=137545771702053&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/55108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/55139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20130204.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/57755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=908029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-0166","sourceIdentifier":"secalert@redhat.com","published":"2013-02-08T19:55:00.967","lastModified":"2026-06-16T23:48:53.230","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key."},{"lang":"es","value":"OpenSSL antes de v0.9.8y, v1.0.0 antes de v1.0.0k y v1.0.1 antes de v1.0.1d no realizar correctamente la verificación de firmas para las respuestas OCSP, permite a atacantes remotos provocar una denegación de servicio (desreferencia puntero NULL y caída de la aplicación) a través de una tecla no válida."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","matchCriteriaId":"6AEBE689-3952-46F0-BACA-BB03041C6D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*","matchCriteriaId":"499E52F3-4B34-4C47-8ABF-292928EBAA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*","matchCriteriaId":"D530BE19-ADCF-4B5C-99E0-2B9A1DE7717F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*","matchCriteriaId":"A7540155-3629-4C76-9C67-8A8E0C1067F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*","matchCriteriaId":"419BBCCD-6F8A-418A-BA02-56267B11D948"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*","matchCriteriaId":"8A3A2AF8-C7DD-43D0-B03F-37E7EB735C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*","matchCriteriaId":"2B8C80A1-D1E7-42D4-8DBC-CB7637D7598E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*","matchCriteriaId":"3EB3990A-3457-4CD6-9EEC-F2D4BC143932"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:*:*:*:*:*:*","matchCriteriaId":"06110A61-8857-46D5-BEE1-882197756DED"}]}]}],"references":[{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=62e4506a7d4cec1c8e1ff687f6b220f6a62a57c7","source":"secalert@redhat.com"},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=66e8211c0b1347970096e04b18aa52567c325200","source":"secalert@redhat.com"},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=ebc71865f0506a293242bd4aec97cdc7a8ef24b0","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=136396549913849&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=136432043316835&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=137545771702053&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0587.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0782.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0783.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0833.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/53623","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/55108","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/55139","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5880","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2013/dsa-2621","source":"secalert@redhat.com"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.openssl.org/news/secadv_20130204.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAHXG","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=908052","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18754","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19081","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19360","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19487","source":"secalert@redhat.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001","source":"secalert@redhat.com"},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=62e4506a7d4cec1c8e1ff687f6b220f6a62a57c7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=66e8211c0b1347970096e04b18aa52567c325200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=ebc71865f0506a293242bd4aec97cdc7a8ef24b0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136396549913849&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=136432043316835&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=137545771702053&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0587.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0782.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0783.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0833.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/53623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/55108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/55139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2013/dsa-2621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openssl.org/news/secadv_20130204.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAHXG","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=908052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-0169","sourceIdentifier":"secalert@redhat.com","published":"2013-02-08T19:55:01.030","lastModified":"2026-06-16T23:48:53.660","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the \"Lucky Thirteen\" issue."},{"lang":"es","value":"El protocolo TLS v1.1 y v1.2 y el protocolo DTLS v1.0 y v1.2, tal como se utiliza en OpenSSL, OpenJDK, PolarSSL, y otros productos, no considera adecuadamente ataques a un requisito de verificación MAC durante el proceso de relleno CBC malformado, lo que permite a atacantes remotos para realizar ataques distintivos y los ataques de recuperación de texto plano través del análisis estadístico de los datos de tiempo de los paquetes hechos a mano, también conocido como el \"Lucky Thirteen\" de emisión."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"0.9.8","versionEndIncluding":"0.9.8x","matchCriteriaId":"7C2F01ED-AB65-4006-AE2A-E9F73791D436"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.0j","matchCriteriaId":"581DC050-33FB-408D-AB43-D3D796BCBBDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.1","versionEndIncluding":"1.0.1d","matchCriteriaId":"02E6874F-3469-4173-92DE-1E90F0B241FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:-:*:*:*:*:*:*","matchCriteriaId":"5C58642D-8504-4D3B-A411-96B83CFCD05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update1:*:*:*:*:*:*","matchCriteriaId":"603BED29-3B3F-49AD-A518-E68B40AE8484"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update10:*:*:*:*:*:*","matchCriteriaId":"0F03670F-559C-433D-8AE8-A3C16F05E1D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update11:*:*:*:*:*:*","matchCriteriaId":"3A294535-7190-4C33-910D-0520F575D800"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update12:*:*:*:*:*:*","matchCriteriaId":"52A6300A-98F2-4E5A-909E-895A6C5B1D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update13:*:*:*:*:*:*","matchCriteriaId":"2280FB93-81A0-4BF4-AD7E-C9EAD277B379"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update14:*:*:*:*:*:*","matchCriteriaId":"1E42E405-91ED-4F41-A2EE-CECB27EB4951"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update15:*:*:*:*:*:*","matchCriteriaId":"11BCE518-1A35-44DE-9B40-B89E7637F830"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update16:*:*:*:*:*:*","matchCriteriaId":"46D0BB1F-FA76-4185-ACD4-587DFB24CFF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update17:*:*:*:*:*:*","matchCriteriaId":"D27FDDD5-083F-4A83-836F-BDCEB94894FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update18:*:*:*:*:*:*","matchCriteriaId":"30BF0C2F-BF35-41B8-BC6A-F2DACE6A9A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update19:*:*:*:*:*:*","matchCriteriaId":"EE05CDF7-1C43-46BF-9A7E-56B31BC1C837"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update2:*:*:*:*:*:*","matchCriteriaId":"A520D505-7BDC-4E82-8A43-7C50AEE2B222"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update20:*:*:*:*:*:*","matchCriteriaId":"5ADF3C32-6663-4003-B7D6-CE3D02AFF45E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update21:*:*:*:*:*:*","matchCriteriaId":"F15C4440-6283-433E-998E-856DA7ED4DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update22:*:*:*:*:*:*","matchCriteriaId":"C729FF50-6E41-4CEB-888A-E0FBD69B7897"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update23:*:*:*:*:*:*","matchCriteriaId":"EB0AB341-46CE-4851-899A-B09C81A9792E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update24:*:*:*:*:*:*","matchCriteriaId":"68EF7AC1-0179-4E10-89DD-5DA33682B3F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update25:*:*:*:*:*:*","matchCriteriaId":"243726CF-F79A-4487-8807-FFA0AC86760B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update26:*:*:*:*:*:*","matchCriteriaId":"5DECF6EC-B787-4CBA-936C-527864B504DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update27:*:*:*:*:*:*","matchCriteriaId":"3C70C7D7-4E28-49D9-A007-EB186E85E5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update29:*:*:*:*:*:*","matchCriteriaId":"99B2B1A1-C3E5-4A32-8F5A-4BA8664E7537"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update3:*:*:*:*:*:*","matchCriteriaId":"3F57C81C-446F-462C-BB64-65F87D1AA28F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update30:*:*:*:*:*:*","matchCriteriaId":"7CFFA025-08DC-4AEF-AAE3-B20ECCB0946E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update31:*:*:*:*:*:*","matchCriteriaId":"ACBA03CE-2EF2-4C51-B796-54C65C3CFBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update32:*:*:*:*:*:*","matchCriteriaId":"085241E5-F958-43DD-AB0A-35EAF6954CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update33:*:*:*:*:*:*","matchCriteriaId":"20CD7414-1D66-4311-90FB-5D53C0C22D82"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update34:*:*:*:*:*:*","matchCriteriaId":"6DCB646B-3F17-427D-AE89-039FCA1F6D7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update35:*:*:*:*:*:*","matchCriteriaId":"FA2AB84A-05D5-4091-B225-7762A73D45BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update37:*:*:*:*:*:*","matchCriteriaId":"5A5A15F9-5047-4BB9-9B3E-A00998B6E7C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update38:*:*:*:*:*:*","matchCriteriaId":"11A0378E-0D41-4FE0-8DAF-A01B66D814DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update4:*:*:*:*:*:*","matchCriteriaId":"942C51A3-87AC-4DB5-BAB9-3771A19C472A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update5:*:*:*:*:*:*","matchCriteriaId":"C34819D3-615F-4CEE-BEAA-CE48BC2E53BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update6:*:*:*:*:*:*","matchCriteriaId":"D97A141E-5FC0-4B79-ABAA-82F6DE857625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.6.0:update7:*:*:*:*:*:*","matchCriteriaId":"D32EAE02-B313-47AC-A1A3-BBF58A692E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.7.0:-:*:*:*:*:*:*","matchCriteriaId":"81EA5E3B-7EA9-45A4-9B69-2DD96471A731"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.7.0:update1:*:*:*:*:*:*","matchCriteriaId":"27DED59D-C293-4D36-B194-B1645CD798C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.7.0:update10:*:*:*:*:*:*","matchCriteriaId":"DC3ADCB9-C4B7-4D30-932B-415C317870F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.7.0:update11:*:*:*:*:*:*","matchCriteriaId":"06FB52F8-8702-4795-BA47-28A1D007952F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.7.0:update13:*:*:*:*:*:*","matchCriteriaId":"3FDD48A5-9956-4AE6-9899-40D0830719FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.7.0:update2:*:*:*:*:*:*","matchCriteriaId":"875DAD00-C396-4F45-8C39-843686D5C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.7.0:update3:*:*:*:*:*:*","matchCriteriaId":"F45FA1E6-D848-482B-BB3F-5B02E837EE60"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.7.0:update4:*:*:*:*:*:*","matchCriteriaId":"94A59C56-6A9B-4630-ACBD-45359451120D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.7.0:update5:*:*:*:*:*:*","matchCriteriaId":"795C1133-BF5E-4B07-A448-13EFAFEED9B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.7.0:update6:*:*:*:*:*:*","matchCriteriaId":"DF20B7CE-1CD3-4D1E-9C5F-E9594A5135D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.7.0:update7:*:*:*:*:*:*","matchCriteriaId":"3206CF31-0EF2-4351-A077-1F8935965492"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:openjdk:1.7.0:update9:*:*:*:*:*:*","matchCriteriaId":"D2E1A163-7376-41C9-A0FF-C8C3B192B73A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"21684D8F-C925-4BBE-A9E5-3799C84BDB13"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"7CE3EE93-6274-4996-A843-D2DF3249E06C"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"0DBD7490-815C-4E93-AD6C-5BBF1E3D6AD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"D3C08BCF-F438-4862-B93A-76282A4129D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"DA654207-3F1A-4737-AA1C-523DBD420D2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:0.12.1:*:*:*:*:*:*:*","matchCriteriaId":"09D1B837-15DB-4A37-AF13-9FE6D894C084"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"CEA214D9-E535-4F68-9A23-504121748700"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:0.14.0:*:*:*:*:*:*:*","matchCriteriaId":"131EF818-747C-47F0-A69B-7F55CCA93F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:0.14.2:*:*:*:*:*:*:*","matchCriteriaId":"B86C938F-CE5E-4955-8702-ABE9B635E337"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:0.14.3:*:*:*:*:*:*:*","matchCriteriaId":"B8DC2818-EBB5-4A14-9468-57737B04F5A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:0.99:pre1:*:*:*:*:*:*","matchCriteriaId":"F0D9D498-444E-4E92-B2A1-C8D72FA59F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:0.99:pre3:*:*:*:*:*:*","matchCriteriaId":"4D9AE2FA-068E-4F9E-BA3B-69123D9B0A67"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:0.99:pre4:*:*:*:*:*:*","matchCriteriaId":"22EA88C6-E217-4D1F-981B-096930A7728C"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:0.99:pre5:*:*:*:*:*:*","matchCriteriaId":"0BB29D8D-8287-4B5B-967F-55DCA0C0ED2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E25A1C90-15E9-4577-B25D-855D48C4F4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"18BC3056-6CF9-4C6A-9F03-C8812CA10AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:1.1.0:rc0:*:*:*:*:*:*","matchCriteriaId":"02CE9326-279B-4CFE-8FBD-4450793D9C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:1.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7513F8AC-A847-412D-B657-9426E4C6C020"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"88CE920F-DBD6-4D01-87E1-26FA10101692"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C6F1E192-D0F2-476E-A7A9-AFB031687533"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2F9DDE3F-26AE-41E0-9433-E5C018C699E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:polarssl:polarssl:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"40F9819E-798E-4DA6-A7E4-39A85B68A5F5"}]}]}],"references":[{"url":"http://blog.fuseyism.com/index.php/2013/02/20/security-icedtea-2-1-6-2-2-6-2-3-7-for-openjdk-7-released/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101366.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00020.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00000.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136396549913849&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136432043316835&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136439120408139&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136733161405818&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=137545771702053&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2013/02/05/24","source":"secalert@redhat.com","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0587.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0782.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0783.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0833.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1455.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1456.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/53623","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/55108","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/55139","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/55322","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/55350","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/55351","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT5880","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21644047","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2013/dsa-2621","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2013/dsa-2622","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.isg.rhul.ac.uk/tls/TLStiming.pdf","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:095","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.matrixssl.org/news.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20130204.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpufeb2013update-1905892.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/57778","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1029190","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAHXG","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1735-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA13-051A.html","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00029.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18841","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19016","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19424","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19540","source":"secalert@redhat.com","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19608","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://puppet.com/security/cve/cve-2013-0169","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0084","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://blog.fuseyism.com/index.php/2013/02/20/security-icedtea-2-1-6-2-2-6-2-3-7-for-openjdk-7-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136396549913849&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136432043316835&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136439120408139&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=136733161405818&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=137545771702053&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2013/02/05/24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0587.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0782.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0783.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0833.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1455.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1456.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/53623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/55108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/55139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/55322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/55350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/55351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT5880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21644047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2013/dsa-2621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2013/dsa-2622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.isg.rhul.ac.uk/tls/TLStiming.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/737740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.matrixssl.org/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20130204.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpufeb2013update-1905892.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/57778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1029190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAHXG","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1735-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA13-051A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://puppet.com/security/cve/cve-2013-0169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03883001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}],"evaluatorComment":"Per http://www.openssl.org/news/vulnerabilities.html:\nFixed in OpenSSL 1.0.1d (Affected 1.0.1c, 1.0.1b, 1.0.1a, 1.0.1) \nFixed in OpenSSL 1.0.0k (Affected 1.0.0j, 1.0.0i, 1.0.0g, 1.0.0f, 1.0.0e, 1.0.0d, 1.0.0c, 1.0.0b, 1.0.0a, 1.0.0) \nFixed in OpenSSL 0.9.8y (Affected 0.9.8x, 0.9.8w, 0.9.8v, 0.9.8u, 0.9.8t, 0.9.8s, 0.9.8r, 0.9.8q, 0.9.8p, 0.9.8o, 0.9.8n, 0.9.8m, 0.9.8l, 0.9.8k, 0.9.8j, 0.9.8i, 0.9.8h, 0.9.8g, 0.9.8f, 0.9.8d, 0.9.8c, 0.9.8b, 0.9.8a, 0.9.8)\n\nAffected users should upgrade to OpenSSL 1.0.1e, 1.0.0k or 0.9.8y\n(The fix in 1.0.1d wasn't complete, so please use 1.0.1e or later)"}},{"cve":{"id":"CVE-2012-6093","sourceIdentifier":"secalert@redhat.com","published":"2013-02-24T19:55:00.907","lastModified":"2026-06-16T23:47:48.753","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses an \"incompatible structure layout\" that can read memory from the wrong location, which causes Qt to report an incorrect error when certificate validation fails and might cause users to make unsafe security decisions to accept a certificate."},{"lang":"es","value":"La función QSslSocket::sslErrors en Qt anterior a v4.6.5, v4.7.x anterior a v4.7.6, v4.8.x anterior a v4.8.5, cuando se usan ciertas versiones de openSSL, usa un diseño de estructura incompatible que puede leer memoria desde una dirección erronea, lo que produce que Qt reporte un error incorrecto cuando el certificado de validación falle y puede causar a los usuarios que hagan decisiones de seguridad inseguras para aceptar certificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:*:rc:*:*:*:*:*:*","versionEndIncluding":"4.6.5","matchCriteriaId":"89E6A634-D297-42AF-B001-48BCBB89C240"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2B74E5F5-CEE1-47B1-BE84-7F1C45D4FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"82A767D8-6194-4ED5-B9BE-2A14541C141F"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"874E217C-98AC-4F0B-B120-D721164912CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"3051F46B-E301-4DF7-A89B-4E8495617888"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0C8BED3D-E6E9-4A7F-A186-DD7DC20706D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"1C5CFCD4-6CB1-489D-9619-B0169EA1719C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"5C2D2DA2-4D77-4396-97A7-D4ED0F633E19"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"1BC1BC2C-6D99-463F-9326-AF9B468E03F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"342A67CF-B332-46D1-A3FF-604552953C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"9239A893-506A-4853-8B00-FCDE5EC3E5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"1A6196C5-BB95-447A-B610-4765AB702F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"3E398049-C78A-452C-9FBF-E32DC86BDBD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.7.6:rc:*:*:*:*:*:*","matchCriteriaId":"6E5EF3D1-6BD5-4488-A18C-79E26E87CFA6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"B307395A-36B6-4F54-92C9-D732580F3EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"F9D0CB6E-5275-4D51-81F1-84D456F936B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"214A1125-FBE9-433D-8B05-10595CD59F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"EB7CC6B1-7E40-4D6A-94CF-7412EA3F8534"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"062A62AA-EC5B-4D8E-9337-D25DF4FE56FA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*","matchCriteriaId":"7118F616-25CA-4E34-AA13-4D14BB62419F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*","matchCriteriaId":"E4174F4F-149E-41A6-BBCC-D01114C05F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*","matchCriteriaId":"F5D324C4-97C7-49D3-A809-9EAD4B690C69"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*","matchCriteriaId":"E2076871-2E80-4605-A470-A41C1A8EC7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*","matchCriteriaId":"DE554781-1EB9-446E-911F-6C11970C47F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*","matchCriteriaId":"D806A17E-B8F9-466D-807D-3F1E77603DC8"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697582","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00086.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00089.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-02/msg00014.html","source":"secalert@redhat.com"},{"url":"http://lists.qt-project.org/pipermail/announce/2013-January/000020.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://qt.gitorious.org/qt/qt/commit/3b14dc93cf0ef06f1424d7d6319a1af4505faa53%20%284.7%29","source":"secalert@redhat.com"},{"url":"http://qt.gitorious.org/qt/qt/commit/691e78e5061d4cbc0de212d23b06c5dffddf2098%20%284.8%29","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/52217","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2013/01/04/6","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1723-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=891955","source":"secalert@redhat.com"},{"url":"https://codereview.qt-project.org/#change%2C42461","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00086.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00089.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-02/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.qt-project.org/pipermail/announce/2013-January/000020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://qt.gitorious.org/qt/qt/commit/3b14dc93cf0ef06f1424d7d6319a1af4505faa53%20%284.7%29","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://qt.gitorious.org/qt/qt/commit/691e78e5061d4cbc0de212d23b06c5dffddf2098%20%284.8%29","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/52217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2013/01/04/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1723-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=891955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://codereview.qt-project.org/#change%2C42461","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-1900","sourceIdentifier":"secalert@redhat.com","published":"2013-04-04T17:55:00.893","lastModified":"2026-06-16T23:52:21.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the \"contrib/pgcrypto functions.\""},{"lang":"es","value":"PostgreSQL v9.2.x anterior a v9.2.4, v9.1.x anterior a v9.1.9, v9.0.x anterior a v9.0.13, y v8.4.x anterior a v8.4.17 cuando se utiliza OpenSSL, genera números insuficiente aleatorios, lo que podría permitir a usuarios remotos autenticados provocar un impacto no especificado a través de vectores relacionados con las funciones \"contrib/pgcrypto\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","baseScore":8.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.2:*:*:*:*:*:*:*","matchCriteriaId":"AD27648F-E2FF-4779-97F9-2632DCC6B16D"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CEFB4916-8B59-4534-804C-CF9DA1B18508"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3413A3AB-45A3-48E1-9B30-1194C4E7D49D"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5760CE83-4802-42A0-9338-E1E634882450"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.1:*:*:*:*:*:*:*","matchCriteriaId":"4796DBEC-FF4F-4749-90D5-AD83D8B5E086"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"79108278-D644-4506-BD9C-F464C6E817B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"10CF0AA0-41CD-4D50-BA7A-BF8846115C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"965E1A9D-BB23-4C0B-A9CA-54A1855055B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A1F37C66-0AFE-4D59-8867-BDBCE656774E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5CE53AE6-232C-4068-98D1-7749007C3CFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.1.6:*:*:*:*:*:*:*","matchCriteriaId":"FFD38139-FD17-41E7-8D10-7731D8203CFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.1.7:*:*:*:*:*:*:*","matchCriteriaId":"CCC0B41F-38FF-4D41-9E31-D666A84BB2FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.1.8:*:*:*:*:*:*:*","matchCriteriaId":"A591CB08-5CEB-45EB-876F-417DCD60AF53"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2DD4DE67-9E3C-4F79-8AAB-344C1C46C618"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CCB718D2-97AA-4D61-AA4B-2216EEF55F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"605C06BF-54A0-40F8-A01E-8641B4A83035"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1F1F5B75-78D5-408E-8148-CA23DCED9CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"88DE8C27-0E0A-4428-B25D-054D4FC6FEA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F609DDE4-0858-4F83-B8E6-7870196E21CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.0.6:*:*:*:*:*:*:*","matchCriteriaId":"349F02AF-013E-4264-9717-010293A3D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.0.7:*:*:*:*:*:*:*","matchCriteriaId":"047926F2-846A-4870-9640-9A4F2804D71B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.0.8:*:*:*:*:*:*:*","matchCriteriaId":"BB0165D8-0BFA-4D46-95A3-45A03DC086FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1D6CF6A0-43DC-4C64-A3C4-01EB36F6672B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.0.10:*:*:*:*:*:*:*","matchCriteriaId":"1E8251C0-9CAE-4608-BC11-75646A601408"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.0.11:*:*:*:*:*:*:*","matchCriteriaId":"AC024E5D-122D-4E3D-AD24-759AB5940F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:9.0.12:*:*:*:*:*:*:*","matchCriteriaId":"723336B5-405A-4236-A507-2C26E591CF49"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4:*:*:*:*:*:*:*","matchCriteriaId":"8F30CA60-0A82-45CD-8044-CE245393593D"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5C991F71-1E27-47A6-97DC-424FC3EF6011"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5740C7AA-1772-41D8-9851-3E3669CD8521"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.3:*:*:*:*:*:*:*","matchCriteriaId":"970338CD-A680-4DD0-BD27-459B0DDA4002"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A99C579D-44C0-40A4-A4EB-CBCF40D0C2FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.5:*:*:*:*:*:*:*","matchCriteriaId":"3E9E57FA-5EAE-4698-992D-146C6310E0B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.6:*:*:*:*:*:*:*","matchCriteriaId":"C66CDEC1-FB2E-49B7-A8BE-38E43C8ED652"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.7:*:*:*:*:*:*:*","matchCriteriaId":"87DF2937-9C51-4768-BAB1-901BCA636ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.8:*:*:*:*:*:*:*","matchCriteriaId":"515C0ECD-2D95-4B6E-8E2F-DAF94E4A310F"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.9:*:*:*:*:*:*:*","matchCriteriaId":"EA0EB754-7A71-40FA-9EAD-44914EB758C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1089D316-D5A3-4F2D-9E52-57FD626A1D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.11:*:*:*:*:*:*:*","matchCriteriaId":"F17D9158-E85A-4436-9180-E8546CF8F290"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.12:*:*:*:*:*:*:*","matchCriteriaId":"64CBBE6E-8FDA-46AD-96A9-8C6CFFE97ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.13:*:*:*:*:*:*:*","matchCriteriaId":"C7A0D13E-6B06-42E9-BEB9-C8FCC3A4E2ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.14:*:*:*:*:*:*:*","matchCriteriaId":"AB79FB06-4712-4DE8-8C0B-5CEE8530828D"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.15:*:*:*:*:*:*:*","matchCriteriaId":"7054A3D4-8C52-4636-B135-1078B8DF1D5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:8.4.16:*:*:*:*:*:*:*","matchCriteriaId":"A6763B2A-00C4-4AAB-8769-9AAEE4BAA603"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:-:lts:*:*:*:*:*","matchCriteriaId":"D6DFE2D3-46E2-4D0C-8508-30307D654560"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*","matchCriteriaId":"7118F616-25CA-4E34-AA13-4D14BB62419F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*","matchCriteriaId":"E4174F4F-149E-41A6-BBCC-D01114C05F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*","matchCriteriaId":"F5D324C4-97C7-49D3-A809-9EAD4B690C69"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*","matchCriteriaId":"E2076871-2E80-4605-A470-A41C1A8EC7EE"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101519.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102806.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1475.html","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5880","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5892","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2013/dsa-2657","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2013/dsa-2658","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:142","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.postgresql.org/about/news/1456/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-4-17.html","source":"secalert@redhat.com"},{"url":"http://www.postgresql.org/docs/current/static/release-9-0-13.html","source":"secalert@redhat.com"},{"url":"http://www.postgresql.org/docs/current/static/release-9-1-9.html","source":"secalert@redhat.com"},{"url":"http://www.postgresql.org/docs/current/static/release-9-2-4.html","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1789-1","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101519.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102806.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1475.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2013/dsa-2657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2013/dsa-2658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.postgresql.org/about/news/1456/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.postgresql.org/docs/current/static/release-8-4-17.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.postgresql.org/docs/current/static/release-9-0-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.postgresql.org/docs/current/static/release-9-1-9.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.postgresql.org/docs/current/static/release-9-2-4.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1789-1","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorImpact":"Per http://www.ubuntu.com/usn/USN-1789-1/\r\n\"A security issue affects these releases of Ubuntu and its derivatives:\r\n\r\nUbuntu 12.10\r\nUbuntu 12.04 LTS\r\nUbuntu 11.10\r\nUbuntu 10.04 LTS\r\nUbuntu 8.04 LTS\"\r\n"}},{"cve":{"id":"CVE-2013-2944","sourceIdentifier":"cve@mitre.org","published":"2013-05-02T14:55:05.430","lastModified":"2026-06-16T23:54:16.470","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature."},{"lang":"es","value":"strongSwan v4.3.5 hasta v5.0.3, cuando utiliza el plugin OpenSSL para la verificación de firma ECDSA, permite a atacantes remotos autenticarse como otros usuarios a través de una firma invalida."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","baseScore":4.9,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"A76F8B29-E036-4895-8296-29FE49C34A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"345E6CA4-A6E3-4A8B-9542-04D032956FCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CA544693-EE26-47A9-9EA2-5CA2AE17E387"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"693623FC-189E-478E-8426-292A9002AABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"278AB378-33D0-449D-8578-B537B4D28C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D7B465A7-9C74-411B-B65A-892BED6FBD39"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3D84EEB7-9900-4765-A1AD-B005618ACEDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"89057C10-2C55-45CB-8497-40E27EAED297"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"6D8A9FCA-801F-4320-A3EA-F3EA952F47A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7350416E-359D-45F4-A3AC-1CF7E6EC7ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"23A022A5-6DDA-4B4C-8354-935F9D99BC74"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"73AED6DF-50C7-49DE-A9CA-A5AB519B4832"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"3BDCDDFD-E4ED-436F-A8AD-B218CC5790D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"1650266B-7975-4ADB-8E7F-A2854ED27CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"944942A8-79D0-40AC-BE98-D552DCF2BB07"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"905ABDB8-6CC3-4F7F-8853-8EDDA5E5AB8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"14E2A13E-427F-45A7-B898-64C10CD8962B"}]}]}],"references":[{"url":"http://download.strongswan.org/patches/10_openssl_ecdsa_signature_patch/strongswan-4.3.5-5.0.3_openssl_ecdsa_signature.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-05/msg00014.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-06/msg00010.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-06/msg00121.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2013/dsa-2665","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/59580","source":"cve@mitre.org"},{"url":"http://www.strongswan.org/blog/2013/04/30/strongswan-5.0.4-released-%28cve-2013-2944%29.html","source":"cve@mitre.org"},{"url":"http://download.strongswan.org/patches/10_openssl_ecdsa_signature_patch/strongswan-4.3.5-5.0.3_openssl_ecdsa_signature.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-05/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-06/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-06/msg00121.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2013/dsa-2665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/59580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.strongswan.org/blog/2013/04/30/strongswan-5.0.4-released-%28cve-2013-2944%29.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-4073","sourceIdentifier":"cve@mitre.org","published":"2013-08-18T02:52:22.917","lastModified":"2026-06-16T23:56:34.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"La función OpenSSL::SSL.verify_certificate_identity en lib/openssl/ssl.rb en Ruby v1.8 anterior a v1.8.7-p374, v1.9 anterior a v1.9.3-p448, y v2.0 anterior a v2.0.0-p247 no manejar adecuadamente un carácter “\\0” en un nombre de dominio en el campo Subject Alternative Name de un certificado X.509, lo que permite a atacantes \"man-in-the-middle\" suplantar servidores SSL de su elección mediante un certificado manipulado expedido por una Autoridad Certificadora legítima, un problema relacionado con CVE-2009-2408."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.6-26:*:*:*:*:*:*:*","matchCriteriaId":"B220C471-4586-437E-B20C-D2D893B86D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"2D86FC99-3521-4E22-8FD3-65CEB05A6342"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p160:*:*:*:*:*:*","matchCriteriaId":"F81AB75D-9B8D-4880-A1FE-3DB24875BD1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p17:*:*:*:*:*:*","matchCriteriaId":"84A291B0-EABD-4572-B8E2-2457DBAEDC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p173:*:*:*:*:*:*","matchCriteriaId":"8B8B0853-F277-4EF2-A3A2-FC88891AA175"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p174:*:*:*:*:*:*","matchCriteriaId":"470F9991-8033-49A2-B996-4D3595C221F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p22:*:*:*:*:*:*","matchCriteriaId":"1FE05F3A-A8B5-45EE-BF52-D55E2768F890"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p248:*:*:*:*:*:*","matchCriteriaId":"9672DC94-7550-40C1-8FF3-5BD2DC1FA3B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p249:*:*:*:*:*:*","matchCriteriaId":"CDE72BB9-07AB-446A-81BE-85AF243BF3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p299:*:*:*:*:*:*","matchCriteriaId":"55D77438-86CE-4256-8285-EB9CE372D0AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p301:*:*:*:*:*:*","matchCriteriaId":"404E191A-E394-4774-B1FB-2A7BB1558F0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p302:*:*:*:*:*:*","matchCriteriaId":"C1232504-801A-4EDD-A967-D22469181551"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p330:*:*:*:*:*:*","matchCriteriaId":"51F327AA-0F3A-4F81-AD6A-4CF36055D034"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p334:*:*:*:*:*:*","matchCriteriaId":"40E2C5E5-CB07-4CFE-A539-C199D76174F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p352:*:*:*:*:*:*","matchCriteriaId":"C5A64D8C-C117-4315-A2A3-2786D20BDE07"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p357:*:*:*:*:*:*","matchCriteriaId":"AFD81C81-4DE3-48F1-93F1-C6817F32AFBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p358:*:*:*:*:*:*","matchCriteriaId":"57813DB6-4CD3-4D6D-8028-65B71A34AC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p370:*:*:*:*:*:*","matchCriteriaId":"2FAA3BCC-496A-4D6D-8743-8022B202754D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p371:*:*:*:*:*:*","matchCriteriaId":"8E4E7672-8D44-46E7-9E9F-4B763602322E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p373:*:*:*:*:*:*","matchCriteriaId":"8A922B74-1853-43CB-AD6C-C5B0C10B1563"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p71:*:*:*:*:*:*","matchCriteriaId":"0C6D66E2-3E10-4DEA-9E6B-53A5DE78AFCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:p72:*:*:*:*:*:*","matchCriteriaId":"17AA24B4-30C7-4D46-A55C-A5CC7C446436"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview1:*:*:*:*:*:*","matchCriteriaId":"4E37786B-5336-4182-A1E3-801BDB6F61EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview2:*:*:*:*:*:*","matchCriteriaId":"349D014E-223A-46A7-8334-543DB330C215"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview3:*:*:*:*:*:*","matchCriteriaId":"550EC183-43A1-4A63-A23C-A48C1F078451"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.8.7:preview4:*:*:*:*:*:*","matchCriteriaId":"0ACECF59-AA88-4B5C-A671-83842C9CF072"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"D0535DC9-EB0E-4745-80AC-4A020DF26E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.3:p0:*:*:*:*:*:*","matchCriteriaId":"94F5AA37-B466-4E2E-B217-5119BADDD87B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.3:p125:*:*:*:*:*:*","matchCriteriaId":"6DF0F0F5-4022-4837-9B40-4B1127732CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.3:p194:*:*:*:*:*:*","matchCriteriaId":"B3848B08-85C2-4AAD-AA33-CCEB80EF5B32"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.3:p286:*:*:*:*:*:*","matchCriteriaId":"B7927D40-2A3A-43AD-99F6-CE61882A1FF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.3:p383:*:*:*:*:*:*","matchCriteriaId":"AA406EC6-6CA5-40A6-A879-AA8940CBEF07"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.3:p385:*:*:*:*:*:*","matchCriteriaId":"1D041884-3921-4466-9A48-F644FDDA9D50"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.3:p392:*:*:*:*:*:*","matchCriteriaId":"397A2EA7-6F83-427B-8578-3794EBF04849"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.3:p426:*:*:*:*:*:*","matchCriteriaId":"298A5681-F756-4952-A9F8-E4C76736DF8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:1.9.3:p429:*:*:*:*:*:*","matchCriteriaId":"BC5A12F7-47E2-4AC7-A41B-F4B01319002D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p0:*:*:*:*:*:*","matchCriteriaId":"D2423B85-0971-42AC-8B64-819008BC5778"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:*","matchCriteriaId":"1C663278-3B2A-4B7C-959A-2AA804467F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:preview1:*:*:*:*:*:*","matchCriteriaId":"CB116A84-1652-4F5D-98AC-81F0349EEDC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:preview2:*:*:*:*:*:*","matchCriteriaId":"259C21E7-6084-4710-9BB3-C232942A451E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"285A3431-BDFE-40C5-92CD-B18217757C23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"D66B32CB-AC49-4A1C-85ED-6389F27CB319"}]}]}],"references":[{"url":"http://forums.interworx.com/threads/8000-InterWorx-Version-5-0-14-Released-on-Beta-Channel%21","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-07/msg00042.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-07/msg00044.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1090.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1103.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1137.html","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT6150","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2013/dsa-2738","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2013/dsa-2809","source":"cve@mitre.org"},{"url":"http://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulnerability-in-openssl-client-cve-2013-4073/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1902-1","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=979251","source":"cve@mitre.org"},{"url":"https://puppet.com/security/cve/cve-2013-4073","source":"cve@mitre.org"},{"url":"http://forums.interworx.com/threads/8000-InterWorx-Version-5-0-14-Released-on-Beta-Channel%21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-07/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-07/msg00044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1090.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1137.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT6150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2013/dsa-2738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2013/dsa-2809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ruby-lang.org/en/news/2013/06/27/hostname-check-bypassing-vulnerability-in-openssl-client-cve-2013-4073/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1902-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=979251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://puppet.com/security/cve/cve-2013-4073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-4248","sourceIdentifier":"secalert@redhat.com","published":"2013-08-18T02:52:23.000","lastModified":"2026-06-16T23:56:53.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408."},{"lang":"es","value":"La función openssl_x509_parse en openssl.c en el módulo OpenSSL en PHP anterior a v5.4.18 y v5.5.x anterior v5.5.2 no manejar adecuadamente un carácter “\\0” en un nombre de dominio en el campo Subject Alternative Name de un certificado X.509, lo que permite a atacantes \"man-in-the-middle\" suplantar servidores SSL de su elección mediante un certificado manipulado expedido por una Autoridad Certificadora legítima, un problema relacionado con CVE-2009-2408."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*","matchCriteriaId":"7118F616-25CA-4E34-AA13-4D14BB62419F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*","matchCriteriaId":"F5D324C4-97C7-49D3-A809-9EAD4B690C69"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*","matchCriteriaId":"E2076871-2E80-4605-A470-A41C1A8EC7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*","matchCriteriaId":"EFAA48D9-BEB4-4E49-AD50-325C262D46D9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.4.17","matchCriteriaId":"B09AD45B-A888-45E3-84A9-AA600940BC8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7007E77F-60EF-44D8-9676-15B59DF1325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"B881352D-954E-4FC0-9E42-93D02A3F3089"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"74E7AE59-1CB0-4300-BBE0-109F909789EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9222821E-370F-4616-B787-CC22C2F4E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9809449F-9A76-4318-B233-B4C2950A6EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0AA962D4-A4EC-4DC3-B8A9-D10941B92781"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8CDFEF9-C367-4800-8A2F-375C261FAE55"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16E43B88-1563-4EFD-9267-AE3E8C35D67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"11E5715F-A8BC-49EF-836B-BB78E1BC0790"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5FA68843-158E-463E-B68A-1ACF041C4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1874F637-77E2-4C4A-BF92-AEE96A60BFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9592B32E-55CD-42D0-901E-8319823BC820"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A9BF34B5-F74C-4D56-9841-42452D60CB87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CD02D837-FD28-4E0F-93F8-25E8D1C84A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88358D1E-BE6F-4CE3-A522-83D1FA4739E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86767200-6C9C-4C3E-B111-0E5BE61E197B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B00B416D-FF23-4C76-8751-26D305F0FA0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*","matchCriteriaId":"CCB6CDDD-70D3-4004-BCE0-8C4723076103"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A782CA26-9C38-40A8-92AE-D47B14D2FCE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0892C89E-9389-4452-B7E0-981A763CD426"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*","matchCriteriaId":"635F3CB1-B042-43CC-91AB-746098018D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*","matchCriteriaId":"E1F32DDF-17A3-45B5-9227-833EBEBD3923"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*","matchCriteriaId":"2CDFB7E9-8510-430F-BFBC-FD811D60DC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*","matchCriteriaId":"79D5336A-14AA-483E-9CBE-A7B53120B925"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:*","matchCriteriaId":"3AADA875-E0EA-483A-A07E-2914FE969972"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.14:*:*:*:*:*:*:*","matchCriteriaId":"95D48A71-B84E-4B6C-9603-B3373052E568"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.15:*:*:*:*:*:*:*","matchCriteriaId":"CAAB7D55-F155-43F9-A563-F2E35CFFEF26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.16:*:*:*:*:*:*:*","matchCriteriaId":"72243A3F-6BFD-472B-9EA4-82BE4253ED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.2.17:*:*:*:*:*:*:*","matchCriteriaId":"E415CC22-09CA-47D2-9F1A-0BCA8960835B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9EF4B938-BB14-4C06-BEE9-10CA755C5DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"981C922C-7A7D-473E-8C43-03AB62FB5B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5D0CD11A-09C2-4C60-8F0C-68E55BD6EE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B0F40E4A-E125-4099-A8B3-D42614AA9312"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"4933D9DD-A630-4A3D-9D13-9E182F5F6F8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.5:*:*:*:*:*:*:*","matchCriteriaId":"A9E6D530-91FC-42F4-A427-6601238E0187"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.6:*:*:*:*:*:*:*","matchCriteriaId":"9EC938DB-E066-407F-BDF8-61A1C41136F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"ACDF768D-7F5A-4042-B7DD-398F65F3F094"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"2AF35BB6-C6B1-4683-A8BE-AA72CC34F5B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.9:*:*:*:*:*:*:*","matchCriteriaId":"EC3F1891-032D-409C-904C-A415D2323DFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.10:*:*:*:*:*:*:*","matchCriteriaId":"4B13826D-06B2-4A46-AB24-092F6935958D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.11:*:*:*:*:*:*:*","matchCriteriaId":"1B6528FC-51BE-4E30-B282-D9841553BA26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.12:*:*:*:*:*:*:*","matchCriteriaId":"66CF9452-6225-4726-822B-C7CD620A1D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.13:*:*:*:*:*:*:*","matchCriteriaId":"A953FF53-1106-42D3-BE4A-4F27C7C42F52"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.14:*:*:*:*:*:*:*","matchCriteriaId":"D4D2F015-A38D-43C6-ADC6-A0EFCE150071"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.15:*:*:*:*:*:*:*","matchCriteriaId":"75A8FF8E-A26A-45AD-BD91-9B4822581CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.16:*:*:*:*:*:*:*","matchCriteriaId":"5F27C2F9-73BE-46EF-B5ED-8D407D22D12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.17:*:*:*:*:*:*:*","matchCriteriaId":"EB212796-B71B-4F6B-9156-9C5178FF0931"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.18:*:*:*:*:*:*:*","matchCriteriaId":"DFBCD79D-3821-4538-B6F1-49F51E5983E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.19:*:*:*:*:*:*:*","matchCriteriaId":"B66E709F-E34E-4744-8970-0F70F95A8761"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.20:*:*:*:*:*:*:*","matchCriteriaId":"D20691D0-3102-4E82-BED9-9E7B67F9F778"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.21:*:*:*:*:*:*:*","matchCriteriaId":"6DA7831F-5F53-4A29-9AB1-913EBD095589"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.22:*:*:*:*:*:*:*","matchCriteriaId":"F798EC96-FC60-47BA-AE27-8C2261D9E5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.23:*:*:*:*:*:*:*","matchCriteriaId":"633BEAF3-C73C-48FC-B623-375B9F79C93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.24:*:*:*:*:*:*:*","matchCriteriaId":"965BB50E-7675-43A7-B074-98BCB1EBA311"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.25:*:*:*:*:*:*:*","matchCriteriaId":"B52F6124-1C8E-4568-BACF-A463064DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.26:*:*:*:*:*:*:*","matchCriteriaId":"2BA2F96C-A676-4F13-8E41-600461338B1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.27:*:*:*:*:*:*:*","matchCriteriaId":"E0FE5746-FA0B-493A-B3A9-DE2A153C5ECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E7B9B8D2-78B7-4B17-955B-741C7A6F6634"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5CA2A940-BD69-4D35-AF12-432CB929248B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"29BD13F9-86C8-44C4-A860-9A87870A518E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"1B361FDE-9F6A-4E9A-96F1-619DC56EECB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"3DBD9E7B-1237-47A8-8A07-5CC5246A9C5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6F2BB41E-2096-4291-B0ED-06825FDFE8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.6:*:*:*:*:*:*:*","matchCriteriaId":"52BA94F7-1AF9-415C-AC21-30BC25C74C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0A739A0-698A-422B-886B-430A79F6E945"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.8:*:*:*:*:*:*:*","matchCriteriaId":"086E0D24-A43E-4CEA-9FB0-FE193B88CC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.9:*:*:*:*:*:*:*","matchCriteriaId":"EC8D0963-8CA5-4814-9B6D-4E1C3907737B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.10:*:*:*:*:*:*:*","matchCriteriaId":"77A4B7E0-C872-4E53-AD72-1BB2755E4FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.11:*:*:*:*:*:*:*","matchCriteriaId":"EECCD553-53D5-485E-8C21-E2A5070833B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.12:*:*:*:*:*:*:*","matchCriteriaId":"95357C79-A754-4E0C-B65B-0FA241962B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.12:rc1:*:*:*:*:*:*","matchCriteriaId":"25EAF9A9-F7A1-4AC7-BCFD-769BE0FDB537"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.12:rc2:*:*:*:*:*:*","matchCriteriaId":"74EA8037-7C22-48B3-9FA2-4BFFFFD513D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.13:*:*:*:*:*:*:*","matchCriteriaId":"C8D1254E-0C72-4958-BA7F-5B818C3ACB15"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.13:rc1:*:*:*:*:*:*","matchCriteriaId":"92994FFC-F362-48AC-9CA8-8EBCAC880C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.14:*:*:*:*:*:*:*","matchCriteriaId":"21131DF1-1EE5-4C84-B1E0-FA75BC39B344"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.14:rc1:*:*:*:*:*:*","matchCriteriaId":"0B23F85D-465B-4176-9798-E78AADE421EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.15:rc1:*:*:*:*:*:*","matchCriteriaId":"ADEE52B4-8392-4321-8C00-FABA6270E728"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.16:rc1:*:*:*:*:*:*","matchCriteriaId":"57D74F58-DB3A-4A70-93CF-B350DB65EF49"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9F6D9B19-E64D-4BED-9194-17460CE19E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F644EA6C-50C6-4A1C-A4AC-287AA9477B46"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*","matchCriteriaId":"AA9B3CC0-DF1C-4A86-B2A3-A9D428A5A6E6"}]}]}],"references":[{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2874696a5a8d46639d261571f915c493cd875897","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141390017113542&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1307.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1615.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/54478","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/54657","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/55078","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/59652","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT6150","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2013/dsa-2742","source":"secalert@redhat.com"},{"url":"http://www.php.net/ChangeLog-5.php","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/61776","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1028924","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1937-1","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=2874696a5a8d46639d261571f915c493cd875897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=141390017113542&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1307.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1615.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/54478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/54657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/55078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/59652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT6150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2013/dsa-2742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/61776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1028924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1937-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2013-4545","sourceIdentifier":"secalert@redhat.com","published":"2013-11-23T11:55:04.740","lastModified":"2026-06-16T23:57:25.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate."},{"lang":"es","value":"cURL y libcurl 7.18.0 hasta la versión 7.32.0, cuando es compilado con OpenSSL, desactiva la verificación del nombre de campos del certificado CN y SAN (CURLOPT_SSL_VERIFYHOST) cuando la verificación de firma digital (CURLOPT_SSL_VERIFYPEER) está desactivada, lo que permite a atacantes man-in-the-middle falsificar servidores SSL a través de un certificado válido arbitrario."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.18.0:*:*:*:*:*:*:*","matchCriteriaId":"7494C01F-E9EC-406E-879A-B2045865E282"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.18.1:*:*:*:*:*:*:*","matchCriteriaId":"7DD9F894-4576-4ED1-9F55-4C27ECE7E058"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.18.2:*:*:*:*:*:*:*","matchCriteriaId":"49AFACAC-BBAF-469B-BF05-0478E987120F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.0:*:*:*:*:*:*:*","matchCriteriaId":"6A136E86-0697-4915-BC49-F570C776EDE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.1:*:*:*:*:*:*:*","matchCriteriaId":"ECB241AF-A01D-4FD6-B98A-F4C20F844C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.2:*:*:*:*:*:*:*","matchCriteriaId":"C5B61901-F7DF-4805-8EB7-CA1701CA81CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.3:*:*:*:*:*:*:*","matchCriteriaId":"EB0CDEC9-224A-4668-B2E4-2145653E3F2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.4:*:*:*:*:*:*:*","matchCriteriaId":"E92BE9CB-F001-47A0-94E0-48FC01A63FE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.5:*:*:*:*:*:*:*","matchCriteriaId":"324E2A20-2F66-4E03-9A7F-A09E631E9033"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.6:*:*:*:*:*:*:*","matchCriteriaId":"C8987B53-BD80-40B9-8429-21AD97208040"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.7:*:*:*:*:*:*:*","matchCriteriaId":"490D1BDC-33B9-43BA-B6DA-42DEE577082A"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.20.0:*:*:*:*:*:*:*","matchCriteriaId":"B465BE7E-0B4D-4BC4-894B-3F51A201CE91"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.20.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA17087-3021-4961-B53C-CDCC872A31A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.0:*:*:*:*:*:*:*","matchCriteriaId":"E5CA3936-4602-40E6-B75C-58D3F24268E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.1:*:*:*:*:*:*:*","matchCriteriaId":"D87C110C-21DD-438A-90EF-BE516CF59F3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.2:*:*:*:*:*:*:*","matchCriteriaId":"AD2D9E0E-2EED-4FB5-859C-05226FC48D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.3:*:*:*:*:*:*:*","matchCriteriaId":"7CA01E21-71CE-4B07-B5A6-D0D7AC493A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.4:*:*:*:*:*:*:*","matchCriteriaId":"51239254-31CE-4BF7-8669-1525BA391362"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.5:*:*:*:*:*:*:*","matchCriteriaId":"2E2BE20D-232D-4C86-81B0-C82CCC1CAA62"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.6:*:*:*:*:*:*:*","matchCriteriaId":"D652FD7C-1521-4391-AAE1-0A4D6F4CE8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.7:*:*:*:*:*:*:*","matchCriteriaId":"DB861143-F809-45CF-95BE-E64F4BA1A0DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.22.0:*:*:*:*:*:*:*","matchCriteriaId":"E3480F4A-0AE0-4428-9EDA-5A6B994909A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.23.0:*:*:*:*:*:*:*","matchCriteriaId":"936BF59E-33A8-46BA-9FBD-8763812E2F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.23.1:*:*:*:*:*:*:*","matchCriteriaId":"33168C81-6DAE-40D6-9693-68390CD71DA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.24.0:*:*:*:*:*:*:*","matchCriteriaId":"424F9604-AA9A-4D45-A521-0BDEDB723659"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.25.0:*:*:*:*:*:*:*","matchCriteriaId":"DC6EBCEB-E52C-4FF5-B15A-6960F58090EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.26.0:*:*:*:*:*:*:*","matchCriteriaId":"D204E994-4591-403C-8EF3-D3B7BF4AA1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.27.0:*:*:*:*:*:*:*","matchCriteriaId":"EBF5418D-1162-4B1E-BC3D-06A3E084BEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.28.0:*:*:*:*:*:*:*","matchCriteriaId":"1CA65F31-3D54-4F66-A0A3-2BD993FF38F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.28.1:*:*:*:*:*:*:*","matchCriteriaId":"41ACC9FE-62FF-424B-B4B8-B033FEAF7686"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.29.0:*:*:*:*:*:*:*","matchCriteriaId":"F8BC39E9-5945-4DC8-ACA8-1C9918D9F279"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.30.0:*:*:*:*:*:*:*","matchCriteriaId":"B9658447-FBB0-4DEA-8FEE-BD4D3D1BF7FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.31.0:*:*:*:*:*:*:*","matchCriteriaId":"5ECABFCB-0D02-4B5B-BB35-C6B3C0896348"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.32.0:*:*:*:*:*:*:*","matchCriteriaId":"5A5176F0-E62F-46FF-B536-DC0680696773"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.18.0:*:*:*:*:*:*:*","matchCriteriaId":"EEA3D88B-41B9-4D79-B47D-B3D6058C0C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.18.1:*:*:*:*:*:*:*","matchCriteriaId":"C2C80901-D48E-4C2A-9BED-A40007A11C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.18.2:*:*:*:*:*:*:*","matchCriteriaId":"331A51E4-AA73-486F-9618-5A83965F2436"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.0:*:*:*:*:*:*:*","matchCriteriaId":"EB32DF2C-9208-4853-ADEB-B00D764D7467"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.1:*:*:*:*:*:*:*","matchCriteriaId":"E05636DC-7E38-4605-AAB8-81C0AE37520A"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.2:*:*:*:*:*:*:*","matchCriteriaId":"624DF2F1-53FD-48D3-B93D-44E99C9C0C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.3:*:*:*:*:*:*:*","matchCriteriaId":"F2171C7C-311A-4405-B95F-3A54966FA844"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.4:*:*:*:*:*:*:*","matchCriteriaId":"5DE20A41-8B53-46FC-9002-69CC7495171F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.5:*:*:*:*:*:*:*","matchCriteriaId":"87ED9DA0-E880-4CBB-B1AC-5AEE8A004718"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.6:*:*:*:*:*:*:*","matchCriteriaId":"5293C7F0-BF9F-4768-889A-876CE78903CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.7:*:*:*:*:*:*:*","matchCriteriaId":"F3EB41B3-65F3-4B0E-8CCC-325B14AF605B"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.20.0:*:*:*:*:*:*:*","matchCriteriaId":"857B244C-2AFB-40C7-A893-7C6DE9871BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.20.1:*:*:*:*:*:*:*","matchCriteriaId":"B732CE55-820A-40E0-A885-71BBB6CF8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.0:*:*:*:*:*:*:*","matchCriteriaId":"0455A5F2-1515-4CD8-BA2F-74D28E91A661"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.1:*:*:*:*:*:*:*","matchCriteriaId":"29034B3A-BE9D-4D68-8C56-4465C03C3693"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.2:*:*:*:*:*:*:*","matchCriteriaId":"6249538E-FBCB-4130-91FB-DA78D7BA45DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.3:*:*:*:*:*:*:*","matchCriteriaId":"5E11B8A5-50A2-468F-BFB3-86DD9D28AC73"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.4:*:*:*:*:*:*:*","matchCriteriaId":"9EAE25A0-3828-46F1-AB30-88732CBC9F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.5:*:*:*:*:*:*:*","matchCriteriaId":"1533A85C-2160-445D-8787-E624AEDC5A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.6:*:*:*:*:*:*:*","matchCriteriaId":"D87B9393-7EA4-43DA-900C-7E840AE2D4C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.7:*:*:*:*:*:*:*","matchCriteriaId":"7D1249E9-304F-4952-8DAB-8B79CE5E7D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.22.0:*:*:*:*:*:*:*","matchCriteriaId":"83FAF953-6A65-4FAB-BDB5-03B468CD1C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.23.0:*:*:*:*:*:*:*","matchCriteriaId":"29F8FF1F-A639-4161-9366-62528AAF4C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.23.1:*:*:*:*:*:*:*","matchCriteriaId":"812AB429-379A-4EDE-9664-5BC2989053F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.24.0:*:*:*:*:*:*:*","matchCriteriaId":"13DD791F-C4BD-4456-955A-92E84082AA09"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.25.0:*:*:*:*:*:*:*","matchCriteriaId":"4A17E442-45AA-4780-98B4-9BF764DCC1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.26.0:*:*:*:*:*:*:*","matchCriteriaId":"F6AF544C-5F16-4434-B9FB-93B1B7318950"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.27.0:*:*:*:*:*:*:*","matchCriteriaId":"CBFD9ED9-2412-44AE-9C55-0ED03A121B23"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.28.0:*:*:*:*:*:*:*","matchCriteriaId":"67CCE31B-ABDA-4F32-BAF1-B1AD0664B3E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.28.1:*:*:*:*:*:*:*","matchCriteriaId":"9E66A332-ECD1-4452-B444-FB629022FDF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.29.0:*:*:*:*:*:*:*","matchCriteriaId":"CDD3D599-35E9-4590-B5E0-3AF04D344695"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.30.0:*:*:*:*:*:*:*","matchCriteriaId":"A3B6BFFB-7967-482C-9B49-4BD25C815299"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.31.0:*:*:*:*:*:*:*","matchCriteriaId":"1791BF6D-2C96-4A6E-90D4-2906A73601F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.32.0:*:*:*:*:*:*:*","matchCriteriaId":"260DD751-4145-4B75-B892-5FC932C6A305"}]}]}],"references":[{"url":"http://curl.haxx.se/docs/adv_20131115.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00047.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00053.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2013/dsa-2798","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2048-1","source":"secalert@redhat.com"},{"url":"https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322","source":"secalert@redhat.com"},{"url":"http://curl.haxx.se/docs/adv_20131115.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2013/dsa-2798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2048-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-6420","sourceIdentifier":"secalert@redhat.com","published":"2013-12-17T04:46:45.877","lastModified":"2026-06-17T00:00:27.370","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function."},{"lang":"es","value":"La función asn1_time_to_time_t en ext / openssl / openssl.c en PHP anterior a 5.3.28, 5.4.x aterior a 5.4.23 y 5.5.x anterior de 5.5.7 no trata correctamente las marcas de tiempo (timestamps)  (1) notBefore y (2) notAfter  en certificados X 0.509 , lo que permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria) a través de un certificado manipulado que no está tratado adecuadamente  por  la función openssl_x509_parse."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E7B9B8D2-78B7-4B17-955B-741C7A6F6634"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5CA2A940-BD69-4D35-AF12-432CB929248B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"29BD13F9-86C8-44C4-A860-9A87870A518E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"1B361FDE-9F6A-4E9A-96F1-619DC56EECB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"3DBD9E7B-1237-47A8-8A07-5CC5246A9C5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6F2BB41E-2096-4291-B0ED-06825FDFE8BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.6:*:*:*:*:*:*:*","matchCriteriaId":"52BA94F7-1AF9-415C-AC21-30BC25C74C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0A739A0-698A-422B-886B-430A79F6E945"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.8:*:*:*:*:*:*:*","matchCriteriaId":"086E0D24-A43E-4CEA-9FB0-FE193B88CC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.9:*:*:*:*:*:*:*","matchCriteriaId":"EC8D0963-8CA5-4814-9B6D-4E1C3907737B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.10:*:*:*:*:*:*:*","matchCriteriaId":"77A4B7E0-C872-4E53-AD72-1BB2755E4FDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.11:*:*:*:*:*:*:*","matchCriteriaId":"EECCD553-53D5-485E-8C21-E2A5070833B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.12:*:*:*:*:*:*:*","matchCriteriaId":"95357C79-A754-4E0C-B65B-0FA241962B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.12:rc1:*:*:*:*:*:*","matchCriteriaId":"25EAF9A9-F7A1-4AC7-BCFD-769BE0FDB537"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.12:rc2:*:*:*:*:*:*","matchCriteriaId":"74EA8037-7C22-48B3-9FA2-4BFFFFD513D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.13:*:*:*:*:*:*:*","matchCriteriaId":"C8D1254E-0C72-4958-BA7F-5B818C3ACB15"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.13:rc1:*:*:*:*:*:*","matchCriteriaId":"92994FFC-F362-48AC-9CA8-8EBCAC880C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.14:*:*:*:*:*:*:*","matchCriteriaId":"21131DF1-1EE5-4C84-B1E0-FA75BC39B344"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.14:rc1:*:*:*:*:*:*","matchCriteriaId":"0B23F85D-465B-4176-9798-E78AADE421EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.15:*:*:*:*:*:*:*","matchCriteriaId":"08A0FB69-9BB2-4CCA-87C5-18368109D6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.15:rc1:*:*:*:*:*:*","matchCriteriaId":"ADEE52B4-8392-4321-8C00-FABA6270E728"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.16:*:*:*:*:*:*:*","matchCriteriaId":"43A4C220-AF4F-4DB0-A66A-175C8EF6CEB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.16:rc1:*:*:*:*:*:*","matchCriteriaId":"57D74F58-DB3A-4A70-93CF-B350DB65EF49"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.17:*:*:*:*:*:*:*","matchCriteriaId":"AAEE86A0-C3FC-446E-8DF0-4FA32F741E1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.18:*:*:*:*:*:*:*","matchCriteriaId":"90B670B6-A211-40C6-A8A0-1B0188EF891F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.19:*:*:*:*:*:*:*","matchCriteriaId":"AAAC4776-F3FF-42D8-AC6E-4746987D30BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.20:*:*:*:*:*:*:*","matchCriteriaId":"41DC16B7-7A45-4BDE-B340-F17D97CA3BDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.21:*:*:*:*:*:*:*","matchCriteriaId":"0FD7C2E6-9B34-4890-A0D1-39BB8ECA47E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.4.22:*:*:*:*:*:*:*","matchCriteriaId":"4F8F72EC-7431-4B36-89EF-E7593ACFBFEA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*","matchCriteriaId":"DE554781-1EB9-446E-911F-6C11970C47F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*","matchCriteriaId":"D806A17E-B8F9-466D-807D-3F1E77603DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*","matchCriteriaId":"DFBF430B-0832-44B0-AA0E-BA9E467F7668"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.9.1","matchCriteriaId":"C8303A91-5C8F-4709-83D6-3D211F9C57EE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3.27","matchCriteriaId":"405D31DC-4338-4CF2-BBB3-C118C191AC44"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"9EF4B938-BB14-4C06-BEE9-10CA755C5DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"981C922C-7A7D-473E-8C43-03AB62FB5B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5D0CD11A-09C2-4C60-8F0C-68E55BD6EE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B0F40E4A-E125-4099-A8B3-D42614AA9312"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.4:*:*:*:*:*:*:*","matchCriteriaId":"4933D9DD-A630-4A3D-9D13-9E182F5F6F8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.5:*:*:*:*:*:*:*","matchCriteriaId":"A9E6D530-91FC-42F4-A427-6601238E0187"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.6:*:*:*:*:*:*:*","matchCriteriaId":"9EC938DB-E066-407F-BDF8-61A1C41136F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.7:*:*:*:*:*:*:*","matchCriteriaId":"ACDF768D-7F5A-4042-B7DD-398F65F3F094"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"2AF35BB6-C6B1-4683-A8BE-AA72CC34F5B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.9:*:*:*:*:*:*:*","matchCriteriaId":"EC3F1891-032D-409C-904C-A415D2323DFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.10:*:*:*:*:*:*:*","matchCriteriaId":"4B13826D-06B2-4A46-AB24-092F6935958D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.11:*:*:*:*:*:*:*","matchCriteriaId":"1B6528FC-51BE-4E30-B282-D9841553BA26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.12:*:*:*:*:*:*:*","matchCriteriaId":"66CF9452-6225-4726-822B-C7CD620A1D6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.13:*:*:*:*:*:*:*","matchCriteriaId":"A953FF53-1106-42D3-BE4A-4F27C7C42F52"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.14:*:*:*:*:*:*:*","matchCriteriaId":"D4D2F015-A38D-43C6-ADC6-A0EFCE150071"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.15:*:*:*:*:*:*:*","matchCriteriaId":"75A8FF8E-A26A-45AD-BD91-9B4822581CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.16:*:*:*:*:*:*:*","matchCriteriaId":"5F27C2F9-73BE-46EF-B5ED-8D407D22D12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.17:*:*:*:*:*:*:*","matchCriteriaId":"EB212796-B71B-4F6B-9156-9C5178FF0931"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.18:*:*:*:*:*:*:*","matchCriteriaId":"DFBCD79D-3821-4538-B6F1-49F51E5983E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.19:*:*:*:*:*:*:*","matchCriteriaId":"B66E709F-E34E-4744-8970-0F70F95A8761"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.20:*:*:*:*:*:*:*","matchCriteriaId":"D20691D0-3102-4E82-BED9-9E7B67F9F778"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.21:*:*:*:*:*:*:*","matchCriteriaId":"6DA7831F-5F53-4A29-9AB1-913EBD095589"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.22:*:*:*:*:*:*:*","matchCriteriaId":"F798EC96-FC60-47BA-AE27-8C2261D9E5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.23:*:*:*:*:*:*:*","matchCriteriaId":"633BEAF3-C73C-48FC-B623-375B9F79C93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.24:*:*:*:*:*:*:*","matchCriteriaId":"965BB50E-7675-43A7-B074-98BCB1EBA311"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.25:*:*:*:*:*:*:*","matchCriteriaId":"B52F6124-1C8E-4568-BACF-A463064DA48E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.3.26:*:*:*:*:*:*:*","matchCriteriaId":"2BA2F96C-A676-4F13-8E41-600461338B1A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"9F6D9B19-E64D-4BED-9194-17460CE19E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"3D25E591-448C-4E3B-8557-6E48F7571796"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"6DA18F3F-B4B5-40C3-BF19-67C1F0C1787D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"3AF783C9-26E7-4E02-BD41-77B9783667E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"EF49701D-ECE4-4CEB-BDAB-24C09C8AD4B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"7AEDF6F7-001D-4A35-A26F-417991AD377F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"4031DB99-B4B4-41EC-B3C1-543D92C575A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"D5450EA7-A398-49D2-AA8E-7C95B074BAB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"04FE0E4E-BC94-4DC9-BE9B-DC57B952B2FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"BB8E09D8-9CBE-4279-88B7-24A214A5A537"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"2D41ECCE-887D-49A2-9BB3-B559495AC55B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"79B418BC-27F4-4443-A0F7-FF4ADA568C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"8EEBDF62-BA1B-4438-9AEA-8B56AA5713E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F644EA6C-50C6-4A1C-A4AC-287AA9477B46"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"4DD47F30-74F5-48E8-8657-C2373FE2BD22"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"0C09527B-6B47-41F8-BDE6-01C47E452286"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:*","matchCriteriaId":"2E454D87-23CB-4D7F-90FE-942EE54D661F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"1031E646-F2CF-4A3E-8E6A-5D4BC950BEDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"130E50C1-D209-4CFF-9399-69D561340FBB"}]}]}],"references":[{"url":"http://forums.interworx.com/threads/8000-InterWorx-Version-5-0-14-Released-on-Beta-Channel%21","source":"secalert@redhat.com"},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=c1224573c773b6845e83505f717fbf820fc18415","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1813.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1815.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1824.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1825.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1826.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59652","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT6150","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2013/dsa-2816","source":"secalert@redhat.com"},{"url":"http://www.php.net/ChangeLog-5.php","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/64225","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1029472","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2055-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1036830","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322","source":"secalert@redhat.com"},{"url":"https://www.sektioneins.de/advisories/advisory-012013-php-openssl_x509_parse-memory-corruption-vulnerability.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://forums.interworx.com/threads/8000-InterWorx-Version-5-0-14-Released-on-Beta-Channel%21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=c1224573c773b6845e83505f717fbf820fc18415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-12/msg00126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1813.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1815.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1824.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1825.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1826.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT6150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2013/dsa-2816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/64225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1029472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2055-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1036830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04463322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.sektioneins.de/advisories/advisory-012013-php-openssl_x509_parse-memory-corruption-vulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2013-6449","sourceIdentifier":"secalert@redhat.com","published":"2013-12-23T22:55:03.020","lastModified":"2026-06-17T00:00:30.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (daemon crash) via crafted traffic from a TLS 1.2 client."},{"lang":"es","value":"La función ssl_get_algorithm2 en ssl/s3_lib.c en OpenSSL anterior a v1.0.2 obtiene un cierto número de versión de una estructura de datos incorrectos, lo que permite a atacantes remotos provocar una denegación de servicio (caída del demonio) a través de tráfico de red de un cliente TLS v1.2."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1e","matchCriteriaId":"FFA0A46C-C292-4B4A-9210-DE4C7696A4EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"}]}]}],"references":[{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=ca989269a2876bae79393bd54c3e72d49975fc75","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124833.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124854.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124858.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00009.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00031.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0015.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0041.html","source":"secalert@redhat.com"},{"url":"http://rt.openssl.org/Ticket/Display.html?id=3200&user=guest&pass=guest","source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-2833","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/64530","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1029548","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2079-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1045363","source":"secalert@redhat.com"},{"url":"https://issues.apache.org/jira/browse/TS-2355","source":"secalert@redhat.com"},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=ca989269a2876bae79393bd54c3e72d49975fc75","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124833.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124854.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124858.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rt.openssl.org/Ticket/Display.html?id=3200&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/64530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1029548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2079-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1045363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.apache.org/jira/browse/TS-2355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-6450","sourceIdentifier":"secalert@redhat.com","published":"2014-01-01T16:05:15.017","lastModified":"2026-06-17T00:00:31.027","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context and cause a denial of service (application crash) by interfering with packet delivery, related to ssl/d1_both.c and ssl/t1_enc.c."},{"lang":"es","value":"La implementación de retransmisión DTLS en OpenSSL través 0.9.8y y 1.x través 1.0.1e no mantiene adecuadamente las estructuras de datos para sumarios (hashes) y contextos de cifrado, lo que podría permitir a atacantes man-in-the-middle para activar el uso de un contexto diferente e interferir con la entrega de paquetes, relacionado con ssl/d1_both.c y ssl/t1_enc.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"}]}]}],"references":[{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=34628967f1e65dc8f34e000f0f5518e21afbfc7b","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00031.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00032.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0015.html","source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-2833","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/vulnerabilities.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/64618","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1029549","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1031594","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2079-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"secalert@redhat.com"},{"url":"https://puppet.com/security/cve/cve-2013-6450","source":"secalert@redhat.com"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-6450","source":"secalert@redhat.com"},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=34628967f1e65dc8f34e000f0f5518e21afbfc7b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/64618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1029549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1031594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2079-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://puppet.com/security/cve/cve-2013-6450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-6450","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-4353","sourceIdentifier":"secalert@redhat.com","published":"2014-01-09T01:55:03.153","lastModified":"2026-06-16T23:57:04.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake."},{"lang":"es","value":"La función ssl3_take_mac en ssl/s3_both.c en OpenSSL 1.0.1 anterior a 1.0.1f permite a los servidores TLS remotos provocar una denegación de servicio (referencia a un puntero NULL y caída de aplicación) a través de un registro Next Protocol Negotiation modificado en un TLS handshake."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"}]}]}],"references":[{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=blob_plain%3Bf=CHANGES%3Bhb=refs/heads/OpenSSL_1_0_1-stable","source":"secalert@redhat.com"},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=197e0ea817ad64820789d86711d55ff50d71f631","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00065.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00067.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00070.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0015.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0041.html","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-2837","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/vulnerabilities.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAMB3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2079-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1049058","source":"secalert@redhat.com"},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=blob_plain%3Bf=CHANGES%3Bhb=refs/heads/OpenSSL_1_0_1-stable","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=197e0ea817ad64820789d86711d55ff50d71f631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00070.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAMB3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2079-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1049058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-7295","sourceIdentifier":"cve@mitre.org","published":"2014-01-17T21:55:14.613","lastModified":"2026-06-17T00:01:40.923","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Tor before 0.2.4.20, when OpenSSL 1.x is used in conjunction with a certain HardwareAccel setting on Intel Sandy Bridge and Ivy Bridge platforms, does not properly generate random numbers for (1) relay identity keys and (2) hidden-service identity keys, which might make it easier for remote attackers to bypass cryptographic protection mechanisms via unspecified vectors."},{"lang":"es","value":"Tor anteriores a 0.2.4.20, cuando OpenSSL 1.x es utilizado en conjunción con cierto ajuste de HardwareAccel en las plataformas Intel Sandy Bridge e Ivy Bridge, no genera apropiadamente números aleatorios para (1) claves de identidad de relay y (2) claves de identidad de servicio oculto, lo cual podría hacer más fácil para los atacantes remotos sortear mecanismos de protección criptográfica a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.4.19","matchCriteriaId":"38E5B597-6BA7-4360-BA84-C8B2DD61C0FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.1:alpha:*:*:*:*:*:*","matchCriteriaId":"0CDF07FC-69FD-439D-807F-01B70803C6C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.2:alpha:*:*:*:*:*:*","matchCriteriaId":"A8433119-07E6-47BD-B8E6-4E0BBB694811"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.3:alpha:*:*:*:*:*:*","matchCriteriaId":"B5EAA2B8-1923-4BB3-A685-E7B6275E9FD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.4:alpha:*:*:*:*:*:*","matchCriteriaId":"2A03FBE6-EC3D-4D24-9447-B75CE67F2737"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.5:alpha:*:*:*:*:*:*","matchCriteriaId":"40221BB3-73E6-4E7D-8994-BFCC8C8C0EDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.6:alpha:*:*:*:*:*:*","matchCriteriaId":"3A1BFADB-776C-4522-9747-2BB094A5091F"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.7:alpha:*:*:*:*:*:*","matchCriteriaId":"CCE1D379-5374-4158-8310-96F2CA67ED61"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.8:alpha:*:*:*:*:*:*","matchCriteriaId":"160AC840-E501-4DE4-AF63-E5F987219F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.9:alpha:*:*:*:*:*:*","matchCriteriaId":"CA548CBD-31C5-4261-91A5-0D1314B827F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.10:alpha:*:*:*:*:*:*","matchCriteriaId":"D3421BEF-A468-4947-8EA7-02BF500D511C"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.11:alpha:*:*:*:*:*:*","matchCriteriaId":"15D0BE3B-F4A4-4E18-9D83-487AFB366BBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.12:alpha:*:*:*:*:*:*","matchCriteriaId":"A3DDD7F0-D041-40FF-919A-2C905A7E2238"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.13:alpha:*:*:*:*:*:*","matchCriteriaId":"088D58DE-5C4D-4E0C-8CF4-3A2109D3F4A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.14:alpha:*:*:*:*:*:*","matchCriteriaId":"082F51D5-5890-45A9-8EDA-0E0215C0EAEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.15:rc:*:*:*:*:*:*","matchCriteriaId":"72C8D3FA-8B99-4A4D-BC62-FD50EF77CEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.16:rc:*:*:*:*:*:*","matchCriteriaId":"FDFF7FEE-4B36-4B86-8BC2-64C9009B3D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.17:rc:*:*:*:*:*:*","matchCriteriaId":"D5A18B95-0EEB-403C-A9C1-E559DBC64E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:torproject:tor:0.2.4.18:rc:*:*:*:*:*:*","matchCriteriaId":"FCFFA8A6-6D1A-4CFF-95A8-5FF2BE6287C4"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00095.html","source":"cve@mitre.org"},{"url":"https://lists.torproject.org/pipermail/tor-talk/2013-December/031483.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.torproject.org/pipermail/tor-talk/2013-December/031483.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-2234","sourceIdentifier":"cve@mitre.org","published":"2014-03-05T05:11:22.453","lastModified":"2026-06-17T00:06:15.993","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A certain Apple patch for OpenSSL in Apple OS X 10.9.2 and earlier uses a Trust Evaluation Agent (TEA) feature without terminating certain TLS/SSL handshakes as specified in the SSL_CTX_set_verify callback function's documentation, which allows remote attackers to bypass extra verification within a custom application via a crafted certificate chain that is acceptable to TEA but not acceptable to that application."},{"lang":"es","value":"Cierto parche de Apple para OpenSSL en Apple OS X 10.9.2 y anteriores utiliza una funcionalidad Trust Evaluation Agent (TEA) sin terminar ciertas negociaciones TLS/SSL según lo especificado en la documentación de la función SSL_CTX_set_verify callback, lo que permite a atacantes remotos evadir verificación extra dentro de una aplicación personalizada a través de una cadena de certificación manipulada que es aceptable para TEA pero no aceptable para esa aplicación."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.9.2","matchCriteriaId":"9FB1A2F7-1084-4786-848A-91E201B98AB6"}]}]}],"references":[{"url":"https://hynek.me/articles/apple-openssl-verification-surprises/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://hynek.me/articles/apple-openssl-verification-surprises/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2014-0017","sourceIdentifier":"secalert@redhat.com","published":"2014-03-14T15:55:05.603","lastModified":"2026-06-17T00:02:05.843","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid collision."},{"lang":"es","value":"La función RAND_bytes en libssh anterior a 0.6.3, cuando la creación de procesos (“forking”) está habilitada, no restablece debidamente el estado del generador de números pseudo-aleatorios OpenSSL (PRNG), lo que causa que el estado se comparte entre procesos de niños y permite a usuarios locales obtener información sensible mediante el aprovechamiento de una colisión pid."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.2","matchCriteriaId":"F92F6AA4-B893-4A3C-8D00-AE4A607CFF76"},{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"EA0F1552-63D8-4E97-A44A-EF55E8A330B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:0.4.8:*:*:*:*:*:*:*","matchCriteriaId":"6514D889-F87F-44D1-9C7B-5BE75676DCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"A80094C5-1273-43AB-9E1E-096D8B0A60BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:0.5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"CF67514C-3240-42A4-9996-21E855104C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7BBD0BC3-2467-414E-BD82-2A5778B810F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D611A20-8A47-43DE-A6EC-90977C227C64"},{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"28074A59-84B3-417F-B18A-5979F940A027"},{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"4FDA1F32-B3D1-416B-BE64-8B80C99B9DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"D4721CE8-E74D-42CF-AB75-E6F73A6F75BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"26F92DD2-760B-4C4A-9AA8-384327B8699A"},{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"388BE929-54F4-4058-B869-9E1663825AD6"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2014-03/msg00036.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-03/msg00040.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57407","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2879","source":"secalert@redhat.com"},{"url":"http://www.libssh.org/2014/03/04/libssh-0-6-3-security-release/","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/03/05/1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2145-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1072191","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-03/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-03/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.libssh.org/2014/03/04/libssh-0-6-3-security-release/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/03/05/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2145-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1072191","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-0016","sourceIdentifier":"secalert@redhat.com","published":"2014-03-24T16:31:08.447","lastModified":"2026-06-17T00:02:05.723","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the same process ID to use the same entropy pool and allows remote attackers to obtain private keys for EC (ECDSA) or DSA certificates."},{"lang":"es","value":"stunnel anterior a 5.00, cuando utilizando hilo de bifurcación, no actualiza debidamente el estado del generador de números psuedoaleatorios OpenSSL (PRNG), lo que causa que hijos posteriores con el mismo proceso ID utilicen el mismo pool de entropía y permite a atacantes remotos obtener claves privadas para certificados EC (ECDSA) o DSA."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-332"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:*:*:*:*:*:*:*:*","versionEndIncluding":"4.56","matchCriteriaId":"AE8D4F93-EED9-4EDB-808C-E7AE0E76BA89"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E27CAA87-6971-4CFB-8299-931952B5157D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:1.0:*:*:*:*:*:*:*","matchCriteriaId":"579E37FC-51E6-4ECA-B05F-F4468772496B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0B56E5F0-6FFC-4188-AF11-F7583253F56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:1.2:*:*:*:*:*:*:*","matchCriteriaId":"8797A96C-B660-45DC-B218-38B8DB85B451"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:1.3:*:*:*:*:*:*:*","matchCriteriaId":"B01D02DC-F570-47CE-AC1B-37DFEC9C1A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:1.4:*:*:*:*:*:*:*","matchCriteriaId":"B283AD3E-A27E-4B76-BEA8-05334DBF0A88"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:1.5:*:*:*:*:*:*:*","matchCriteriaId":"69F0D8C8-3BCE-4AF7-953B-CEA2633E4179"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:1.6:*:*:*:*:*:*:*","matchCriteriaId":"503A7976-C3A6-447A-9531-0DB699C4A625"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9BAFC4E2-FDB5-489C-B9C3-DF13A5186FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D60C3DB-4185-484A-8275-D3541A40C046"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0FB236EF-0F97-4656-AB49-1D7829A63FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:b1:*:*:*:*:*:*","matchCriteriaId":"3073CCF6-5312-4FB2-AA43-D3B285EE32C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:b2:*:*:*:*:*:*","matchCriteriaId":"49E5FD63-32E3-4C40-A55C-B70546FDD866"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:b3:*:*:*:*:*:*","matchCriteriaId":"0B6444AC-588D-4154-B78E-3EB34129F1BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:b4:*:*:*:*:*:*","matchCriteriaId":"EC36154E-6006-45BB-A7CB-5293195602CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:b5:*:*:*:*:*:*","matchCriteriaId":"12C931B9-DDBE-4E94-8361-6A4D55886CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:b6:*:*:*:*:*:*","matchCriteriaId":"3EBE0C35-0FB9-44D6-8FA2-8712A2BF9A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.0:b7:*:*:*:*:*:*","matchCriteriaId":"5FFA8AD2-CAE2-4818-9D0C-0C32E62F3A59"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.1:*:*:*:*:*:*:*","matchCriteriaId":"F4CA2A0A-B7DE-49DD-940D-C19801CF5D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0D68D250-CA5B-4311-AF3C-48605948A067"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.3:*:*:*:*:*:*:*","matchCriteriaId":"2E4A0103-713D-4E56-B32F-EB1649F26EE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.4a:*:*:*:*:*:*:*","matchCriteriaId":"7D009335-E83C-4B35-ADB0-CBD6B82C0EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.5:*:*:*:*:*:*:*","matchCriteriaId":"7F4B0933-7D3A-43C9-9E42-FF5DAE94EDEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.6:*:*:*:*:*:*:*","matchCriteriaId":"F317B556-717B-46B9-A81E-63FC61723B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.7:*:*:*:*:*:*:*","matchCriteriaId":"185B6AF8-18E7-4E6A-A7B9-60DFB17F33E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8:*:*:*:*:*:*:*","matchCriteriaId":"400FE849-D547-44DE-B06F-5B68E5B20E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8:p1:*:*:*:*:*:*","matchCriteriaId":"E0845ED5-9C1A-4F1F-B6E5-AAF8B6893A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8:p2:*:*:*:*:*:*","matchCriteriaId":"1A23EB22-BD30-4FA3-9BAA-0B4B65C49F81"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8:p3:*:*:*:*:*:*","matchCriteriaId":"6EB00100-8EF0-463E-9C17-05525B7B5852"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8:p4:*:*:*:*:*:*","matchCriteriaId":"466B14A9-B16C-41F3-B2A0-C3194A6D1C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8p1:*:*:*:*:*:*:*","matchCriteriaId":"E4AEA6DC-1A98-433F-B916-597395D5914A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8p2:*:*:*:*:*:*:*","matchCriteriaId":"DB24165B-92FD-48BA-94C3-87A922DDC6E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8p3:*:*:*:*:*:*:*","matchCriteriaId":"B04F4BE4-34DE-4B8A-A1F1-32D12D33A5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8p4:*:*:*:*:*:*:*","matchCriteriaId":"A04CF19D-9C30-4433-A5E2-F3949479BE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.9:*:*:*:*:*:*:*","matchCriteriaId":"C236DC35-A2F7-47FB-AD51-17D2A0FD7DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.10:*:*:*:*:*:*:*","matchCriteriaId":"B256301B-9C6A-4BA6-8318-675C0EF4C316"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.11:*:*:*:*:*:*:*","matchCriteriaId":"EC33DAEE-8F51-404F-B5C4-B8A30B467E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.12:*:*:*:*:*:*:*","matchCriteriaId":"1FCDC66D-3BF5-4763-8877-38B0D3326E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.13:*:*:*:*:*:*:*","matchCriteriaId":"75772E28-BD93-4981-96FA-CDF41DAF65AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.14:*:*:*:*:*:*:*","matchCriteriaId":"2415230E-4F66-4DDE-9E34-F685E8F4085A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.15:*:*:*:*:*:*:*","matchCriteriaId":"5121749D-3E19-4A9B-8C2D-84420A4E289B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.16:*:*:*:*:*:*:*","matchCriteriaId":"6E14DE44-69E6-4D0E-AD06-A829AFCDE528"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.17:*:*:*:*:*:*:*","matchCriteriaId":"3D5B202D-D93D-4E33-BC9F-DA44B727C0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.18:*:*:*:*:*:*:*","matchCriteriaId":"CCC62D42-832D-4E6E-93D9-E7BA0CBC7799"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.19:*:*:*:*:*:*:*","matchCriteriaId":"B5D49F98-9A24-464A-8695-58218C14B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.20:*:*:*:*:*:*:*","matchCriteriaId":"ADFFE78D-90EC-46C6-B215-2EADD9E0D146"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21:*:*:*:*:*:*:*","matchCriteriaId":"6132108C-C344-4ABC-AF40-1925830A6723"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21a:*:*:*:*:*:*:*","matchCriteriaId":"8362D330-E286-4534-8560-B4B38E21767F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21b:*:*:*:*:*:*:*","matchCriteriaId":"D0496D60-BE45-45FF-B360-60E59443DB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21c:*:*:*:*:*:*:*","matchCriteriaId":"DA2EA0D4-05B6-4500-9374-74BBDAB6001F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.22:*:*:*:*:*:*:*","matchCriteriaId":"F16BDA03-BFAB-4839-A83A-370865928225"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.23:*:*:*:*:*:*:*","matchCriteriaId":"CDC6F568-DB15-40BD-906B-A4ED4804C40A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.24:*:*:*:*:*:*:*","matchCriteriaId":"EB5A2E06-A98E-409C-9A90-460AF4CCF101"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.25:*:*:*:*:*:*:*","matchCriteriaId":"9DF66986-248A-4EE8-B60F-182C774A4066"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.26:*:*:*:*:*:*:*","matchCriteriaId":"BB8991F3-A5F5-41EE-8809-31E09BAC4DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.00:*:*:*:*:*:*:*","matchCriteriaId":"CD371A76-9729-487E-AA15-775FFEBE3473"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6FC396CE-FDA7-480C-9E94-1A26B7FB208E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.01:*:*:*:*:*:*:*","matchCriteriaId":"C7B30722-13DD-41C5-9CFA-0719B351CF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.02:*:*:*:*:*:*:*","matchCriteriaId":"722BA04D-BA9B-427C-B129-06EFEC3F2859"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.03:*:*:*:*:*:*:*","matchCriteriaId":"2891FF7D-E62E-47F4-8873-1E4066247348"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.04:*:*:*:*:*:*:*","matchCriteriaId":"6A129110-60C1-46FC-9817-6E3802ADB389"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.05:*:*:*:*:*:*:*","matchCriteriaId":"AF52167B-1109-4E02-A02F-17465F4C47FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.06:*:*:*:*:*:*:*","matchCriteriaId":"61536049-1C52-42E2-96DC-E5FF88BCC850"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.07:*:*:*:*:*:*:*","matchCriteriaId":"AE0EE4B5-C9D3-4DF1-B7B7-377B281FA313"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.08:*:*:*:*:*:*:*","matchCriteriaId":"2811F3BC-03F8-4781-8D01-BAAE1BDE8895"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.09:*:*:*:*:*:*:*","matchCriteriaId":"82C4D865-9641-4E28-935C-BDCBDB9C2CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.10:*:*:*:*:*:*:*","matchCriteriaId":"2BF1DADF-BD26-41CF-BFA3-3C2928CDF9F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.11:*:*:*:*:*:*:*","matchCriteriaId":"75CF8185-A8FC-4EEE-B937-34924834AB43"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.12:*:*:*:*:*:*:*","matchCriteriaId":"A1561B7D-78BC-4910-85F4-113E84B97B3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.13:*:*:*:*:*:*:*","matchCriteriaId":"63DDF225-57D2-40E5-9BCA-672FBB3E2A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.14:*:*:*:*:*:*:*","matchCriteriaId":"04043E99-5F67-4FE9-89FC-695B981FBD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.15:*:*:*:*:*:*:*","matchCriteriaId":"FD11753B-1993-4DE5-B172-AF4839B5620E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.16:*:*:*:*:*:*:*","matchCriteriaId":"711059F5-ACB3-4D2A-931F-BA1C4422FC8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.17:*:*:*:*:*:*:*","matchCriteriaId":"5DDB6C42-0837-462B-BE2B-11A81B43C590"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.18:*:*:*:*:*:*:*","matchCriteriaId":"5EEAAF27-156A-40FF-ADBF-79D851E744AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.19:*:*:*:*:*:*:*","matchCriteriaId":"EB202677-DDC6-42D1-9A90-CD4A79198553"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.20:*:*:*:*:*:*:*","matchCriteriaId":"F2C3EF02-B456-4506-94E8-5C41CB4FF69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.21:*:*:*:*:*:*:*","matchCriteriaId":"B07502AA-E3E7-4143-B194-7C366CEA4A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.22:*:*:*:*:*:*:*","matchCriteriaId":"97C554E8-62F4-4C73-821D-AB93D8EE841C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.23:*:*:*:*:*:*:*","matchCriteriaId":"061A0C84-B26C-4ED6-9771-8B7D29DB7053"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.24:*:*:*:*:*:*:*","matchCriteriaId":"E2ECB4F8-B623-4917-8420-E1DE6D9E514D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.25:*:*:*:*:*:*:*","matchCriteriaId":"A415AEFB-16B5-47EA-BFFC-D8494AEAA4D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.26:*:*:*:*:*:*:*","matchCriteriaId":"9928C1C1-B335-4076-80A7-D929A873D01F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.27:*:*:*:*:*:*:*","matchCriteriaId":"CE6DEA2E-6475-4344-A8F0-34E5061B1C74"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.28:*:*:*:*:*:*:*","matchCriteriaId":"A67FCF70-990C-45DE-9690-A3D3505C8E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.29:*:*:*:*:*:*:*","matchCriteriaId":"91E0D2BB-59DC-40FA-83CD-1A49B79E1F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.30:*:*:*:*:*:*:*","matchCriteriaId":"B04C76FA-732D-49D9-8CB6-D0C955E9127D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.31:*:*:*:*:*:*:*","matchCriteriaId":"8BF686D0-3132-4371-9EF5-0E6F299BC98F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.32:*:*:*:*:*:*:*","matchCriteriaId":"13C7E3B7-437A-4096-A5A1-B40271E6A6FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.33:*:*:*:*:*:*:*","matchCriteriaId":"3E0EE85B-15FA-433F-92EB-8CDB07ED2790"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.34:*:*:*:*:*:*:*","matchCriteriaId":"D4A3287D-3B8E-42C3-869D-E73A11289762"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.35:*:*:*:*:*:*:*","matchCriteriaId":"349AD1F9-315C-4D36-9809-E58F5044D02D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.36:*:*:*:*:*:*:*","matchCriteriaId":"69864FF1-8B29-446C-8B5A-160138039C7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.37:*:*:*:*:*:*:*","matchCriteriaId":"67B11EF6-C895-410B-AFA2-8E7B349F9571"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.38:*:*:*:*:*:*:*","matchCriteriaId":"23893E68-A34A-4CBD-B0A5-A41BF346D4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.39:*:*:*:*:*:*:*","matchCriteriaId":"F691D200-26B8-41AC-8123-78A853DFEAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.40:*:*:*:*:*:*:*","matchCriteriaId":"D8E83FE3-B2C1-4DDB-8BD4-48A1DCD25496"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.41:*:*:*:*:*:*:*","matchCriteriaId":"7F82A3BF-F540-4C6B-846F-4E614849EDC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.42:*:*:*:*:*:*:*","matchCriteriaId":"3C88D6AE-BE42-4E3A-9B95-A9E5A3C7ED11"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.43:*:*:*:*:*:*:*","matchCriteriaId":"F9E334EF-1A35-4028-8B60-CA6A6890E490"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.44:*:*:*:*:*:*:*","matchCriteriaId":"73DF6D41-9CD0-4038-9571-C76B73B4E225"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.45:*:*:*:*:*:*:*","matchCriteriaId":"0C89A59C-F6F3-4F2F-AA8A-86E8B259245D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.46:*:*:*:*:*:*:*","matchCriteriaId":"67AF1A8D-9C55-4488-9E03-F0D824912BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.47:*:*:*:*:*:*:*","matchCriteriaId":"969EC7D0-FB81-42FB-8089-E5EC1D107F18"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.48:*:*:*:*:*:*:*","matchCriteriaId":"F66E4DD8-8D15-4DC1-BADD-B6BB6697313E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.49:*:*:*:*:*:*:*","matchCriteriaId":"4015B215-4FFA-423E-A7E2-7F43ADEBA326"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.50:*:*:*:*:*:*:*","matchCriteriaId":"84826AED-EEA7-4527-9A8E-258641B5C637"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.51:*:*:*:*:*:*:*","matchCriteriaId":"9189ECAB-E192-476B-87E1-339AF9BFA4F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.52:*:*:*:*:*:*:*","matchCriteriaId":"C3889099-4FEC-4133-9E7D-A8E529DE939A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.53:*:*:*:*:*:*:*","matchCriteriaId":"0F208151-3577-479E-B554-C94708D3D727"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.54:*:*:*:*:*:*:*","matchCriteriaId":"3F054876-9E47-4FA8-883A-FF9366891829"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:4.55:*:*:*:*:*:*:*","matchCriteriaId":"62EC8E1D-4D8C-4EE0-89EB-2A5CB53D65F5"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2014/03/05/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/65964","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=870826&action=diff","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1072180","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://www.stunnel.org/sdf_ChangeLog.html","source":"secalert@redhat.com","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/03/05/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/65964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=870826&action=diff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1072180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://www.stunnel.org/sdf_ChangeLog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-0076","sourceIdentifier":"secalert@redhat.com","published":"2014-03-25T13:25:21.977","lastModified":"2026-06-17T00:02:12.837","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack."},{"lang":"es","value":"La implementación de la escala Montgomery en OpenSSL hasta la versión 1.0.0l no asegura que ciertas operaciones de intercambio tengan un comportamiento constante en el tiempo, lo que facilita a usuarios locales obtener nonces ECDSA a través de un ataque de caché de canal lateral FLUSH+RELOAD."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0l","matchCriteriaId":"7D44A548-D278-4BCF-930E-0354B0EDE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3a:*:*:*:*:*:*:*","matchCriteriaId":"27F417A1-5D97-4BC4-8B97-5AC40236DA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta1:*:*:*:*:*:*","matchCriteriaId":"B6231CAA-00A8-41CE-8436-B84518014CF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:beta2:*:*:*:*:*:*","matchCriteriaId":"A70AD93B-E876-4EAB-9970-752D42E15E99"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta1:*:*:*:*:*:*","matchCriteriaId":"716ADA01-38B8-4C15-A3BB-D9688DA30599"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:beta2:*:*:*:*:*:*","matchCriteriaId":"B73326F7-7DCE-4EDE-95D7-AE7AED263A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta1:*:*:*:*:*:*","matchCriteriaId":"EA2D251C-9C45-4EFE-8262-E88AB7CE713A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta2:*:*:*:*:*:*","matchCriteriaId":"6D81E175-E698-40EF-9601-425893FFB1FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:beta3:*:*:*:*:*:*","matchCriteriaId":"FA0F25B7-A172-4300-8718-112E817A6165"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta1:*:*:*:*:*:*","matchCriteriaId":"52B1BE89-BAE0-4656-943B-B9B81D9B54B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta2:*:*:*:*:*:*","matchCriteriaId":"D097222B-ED20-459C-9167-55751FA2C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:beta3:*:*:*:*:*:*","matchCriteriaId":"86DDC8F2-7920-4A73-927E-562C89806972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6l:*:*:*:*:*:*:*","matchCriteriaId":"2636B92E-47D5-42EA-9585-A2B84FBE71CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6m:*:*:*:*:*:*:*","matchCriteriaId":"72FE2F46-2D0C-4C90-AFBE-D2E7B496D6E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*","matchCriteriaId":"9644CC68-1E91-45E7-8C53-1E3FC9976A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta5:*:*:*:*:*:*","matchCriteriaId":"9B1B98C4-1FFD-4A7C-AA86-A34BC6F7AB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta6:*:*:*:*:*:*","matchCriteriaId":"73934717-2DA3-4614-A076-D6EDA5EB0626"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*","matchCriteriaId":"4DE6CBD6-D6DD-4BC5-93F6-FDEA70163336"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*","matchCriteriaId":"98693865-2E79-4BD6-9F89-1994BC9A3E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*","matchCriteriaId":"D6476506-EC37-4726-82DC-D0E8254A8CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*","matchCriteriaId":"5D6ECEF7-CB16-4604-894B-6EB19F1CEF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*","matchCriteriaId":"1C81EF3D-4DB7-4799-9670-8D79E28CA184"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*","matchCriteriaId":"A8116A66-175C-4E6D-9A9B-D54C1D97D213"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","matchCriteriaId":"6AEBE689-3952-46F0-BACA-BB03041C6D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*","matchCriteriaId":"499E52F3-4B34-4C47-8ABF-292928EBAA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*","matchCriteriaId":"D530BE19-ADCF-4B5C-99E0-2B9A1DE7717F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*","matchCriteriaId":"A7540155-3629-4C76-9C67-8A8E0C1067F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*","matchCriteriaId":"419BBCCD-6F8A-418A-BA02-56267B11D948"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*","matchCriteriaId":"8A3A2AF8-C7DD-43D0-B03F-37E7EB735C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8y:*:*:*:*:*:*:*","matchCriteriaId":"DC142ACF-3CBD-4F96-B2AA-C7D48E7CF31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2014-0165.html","source":"secalert@redhat.com"},{"url":"http://eprint.iacr.org/2014/140","source":"secalert@redhat.com"},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=2198be3483259de374f91e57d247d0fc667aef29","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-04/msg00007.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140266410314613&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140317760000786&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140482916501310&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/58492","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/58727","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/58939","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59040","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59162","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59175","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59264","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59300","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59364","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59374","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59413","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59438","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59445","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59450","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59454","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59490","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59495","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59514","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59655","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59721","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60571","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT6443","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676092","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676424","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676501","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676655","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","source":"secalert@redhat.com"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:067","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.novell.com/support/kb/doc.php?id=7015264","source":"secalert@redhat.com"},{"url":"http://www.novell.com/support/kb/doc.php?id=7015300","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv_20140605.txt","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/66363","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2165-1","source":"secalert@redhat.com"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=505278","source":"secalert@redhat.com"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=869945","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10075","source":"secalert@redhat.com"},{"url":"http://advisories.mageia.org/MGASA-2014-0165.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://eprint.iacr.org/2014/140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=2198be3483259de374f91e57d247d0fc667aef29","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-04/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140266410314613&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140317760000786&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140482916501310&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/58492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/58727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/58939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT6443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/kb/doc.php?id=7015264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/support/kb/doc.php?id=7015300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv_20140605.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/66363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2165-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=505278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=869945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-0160","sourceIdentifier":"secalert@redhat.com","published":"2014-04-07T22:55:03.893","lastModified":"2026-06-17T00:02:24.467","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug."},{"lang":"es","value":"Las implementaciones de (1) TLS y (2) DTLS en OpenSSL 1.0.1 en versiones anteriores a 1.0.1g no manejan adecuadamente paquetes Heartbeat Extension, lo que permite a atacantes remotos obtener información sensible desde la memoria de proceso a través de paquetes manipulados que desencadenan una sobrelectura del buffer, según lo demostrado mediante la lectura de claves privadas, relacionado con d1_both.c y t1_lib.c, también conocido como bug Heartbleed."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-07T13:32:34.600181Z","id":"CVE-2014-0160","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-05-04","cisaActionDue":"2022-05-25","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"OpenSSL Information Disclosure Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.1","versionEndExcluding":"1.0.1g","matchCriteriaId":"9EE79AC6-5484-4A53-8333-373DAD1B5649"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:filezilla-project:filezilla_server:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.44","matchCriteriaId":"3F09BC00-9D25-4C39-B705-A5A29F630517"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:application_processing_engine_firmware:2.0:*:*:*:*:*:*:*","matchCriteriaId":"119DBCCC-439E-4148-9E11-CE8038066811"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:application_processing_engine:-:*:*:*:*:*:*:*","matchCriteriaId":"AE6A8466-8A69-491B-8DAB-877A6C2F6660"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:cp_1543-1_firmware:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B60287DD-E302-4F8C-833F-E8BE94BDB8D5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:cp_1543-1:-:*:*:*:*:*:*:*","matchCriteriaId":"F703FF33-882F-4CB5-9CA0-8FAE670B2AEF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_s7-1500_firmware:1.5:*:*:*:*:*:*:*","matchCriteriaId":"92646048-3383-4F12-ABCA-8346D9837C2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*","matchCriteriaId":"30DDEA9B-E1BF-4572-8E12-D13C54603E77"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_s7-1500t_firmware:1.5:*:*:*:*:*:*:*","matchCriteriaId":"80CEA1F3-B820-4D36-B879-7D55F3B95002"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1500t:-:*:*:*:*:*:*:*","matchCriteriaId":"741B2C38-174C-49DF-98D8-F7D6F49D1CE5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:elan-8.2:*:*:*:*:*:*:*:*","versionEndExcluding":"8.3.3","matchCriteriaId":"B77B3ED9-1841-449E-B3B2-F53E73254314"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:wincc_open_architecture:3.12:*:*:*:*:*:*:*","matchCriteriaId":"B42FE7D9-673C-4FF3-924B-FC21DF06F769"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:intellian:v100_firmware:1.20:*:*:*:*:*:*:*","matchCriteriaId":"A3F2BCF2-2D0C-44AB-AE21-FBC7F04D099A"},{"vulnerable":true,"criteria":"cpe:2.3:o:intellian:v100_firmware:1.21:*:*:*:*:*:*:*","matchCriteriaId":"B46DDC44-A1B4-4DF8-8AD5-FD235F1C2D54"},{"vulnerable":true,"criteria":"cpe:2.3:o:intellian:v100_firmware:1.24:*:*:*:*:*:*:*","matchCriteriaId":"82BF6806-3E91-4B22-B53D-13F4CD19F757"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:intellian:v100:-:*:*:*:*:*:*:*","matchCriteriaId":"DF9C2817-7F10-4369-A106-68DF9369B454"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:intellian:v60_firmware:1.15:*:*:*:*:*:*:*","matchCriteriaId":"9079EBFD-B901-4077-AD4B-A8B034BDDEA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:intellian:v60_firmware:1.25:*:*:*:*:*:*:*","matchCriteriaId":"CFC20C7E-E264-4892-AA43-E289207935EE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:intellian:v60:-:*:*:*:*:*:*:*","matchCriteriaId":"BD513662-1089-4BF8-A0F8-9BE5CBF937BE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mitel:micollab:6.0:*:*:*:*:*:*:*","matchCriteriaId":"03433A5D-632E-47A5-871A-5859C80CB038"},{"vulnerable":true,"criteria":"cpe:2.3:a:mitel:micollab:7.0:*:*:*:*:*:*:*","matchCriteriaId":"2B28F2FB-F263-4B2E-A4C7-951A474FD7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mitel:micollab:7.1:*:*:*:*:*:*:*","matchCriteriaId":"DC89913A-F419-43E8-B846-D7AA769EA898"},{"vulnerable":true,"criteria":"cpe:2.3:a:mitel:micollab:7.2:*:*:*:*:*:*:*","matchCriteriaId":"9C5C14AB-2C97-406E-98B5-0BDC8B0AFEA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mitel:micollab:7.3:*:*:*:*:*:*:*","matchCriteriaId":"C08973EF-E86A-46D7-9CF6-4374F2789ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mitel:micollab:7.3.0.104:*:*:*:*:*:*:*","matchCriteriaId":"F2317158-3EE7-4894-ADC0-109E0D94DA0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mitel:mivoice:1.1.2.5:*:*:*:*:lync:*:*","matchCriteriaId":"501B4ED7-0A26-430A-91A2-29099D3CF493"},{"vulnerable":true,"criteria":"cpe:2.3:a:mitel:mivoice:1.1.3.3:*:*:*:*:skype_for_business:*:*","matchCriteriaId":"A93F15B3-1341-446F-85D0-E1842EA1F42C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mitel:mivoice:1.2.0.11:*:*:*:*:skype_for_business:*:*","matchCriteriaId":"37A5858D-8DE8-4865-A803-7D8A9D4EA306"},{"vulnerable":true,"criteria":"cpe:2.3:a:mitel:mivoice:1.3.2.2:*:*:*:*:skype_for_business:*:*","matchCriteriaId":"32B33A4D-1E37-4EAA-AE25-7DA399D50046"},{"vulnerable":true,"criteria":"cpe:2.3:a:mitel:mivoice:1.4.0.102:*:*:*:*:skype_for_business:*:*","matchCriteriaId":"EDD5CCE5-CD24-4288-952F-B5814454A890"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*","matchCriteriaId":"DFBF430B-0832-44B0-AA0E-BA9E467F7668"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*","matchCriteriaId":"E2076871-2E80-4605-A470-A41C1A8EC7EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*","matchCriteriaId":"7F61F047-129C-41A6-8A27-FFCBB8563E91"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*","matchCriteriaId":"5991814D-CA77-4C25-90D2-DB542B17E0AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:gluster_storage:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5B45F8E4-0E7A-4D55-84C2-5BE5B6335269"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:storage:2.1:*:*:*:*:*:*:*","matchCriteriaId":"53C986BD-2D1F-4865-B16D-72FD875E3776"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:virtualization:6.0:*:*:*:*:*:*:*","matchCriteriaId":"37BA55FC-D350-4DEB-9802-40AF59C99E79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.5:*:*:*:*:*:*:*","matchCriteriaId":"45010D45-2FF2-4B04-B115-6B6FE606D598"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5:*:*:*:*:*:*:*","matchCriteriaId":"835AE071-CEAE-49E5-8F0C-E5F50FB85EFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ricon:s9922l_firmware:16.10.3\\(3794\\):*:*:*:*:*:*:*","matchCriteriaId":"9ED94033-99C2-419B-BBFA-247B4BB3ED4D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ricon:s9922l:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BB07C7E6-1DFD-4B39-BA17-FB2912CB92D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:symantec_messaging_gateway:10.6.0:*:*:*:*:*:*:*","matchCriteriaId":"1745640A-621C-458B-92C6-C24BA06D79E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:symantec_messaging_gateway:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D4DEF17D-93AD-4E79-96ED-E7C44332BD52"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.3","matchCriteriaId":"F660A53D-39E7-422A-9E77-3D69A91F2E07"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2014-0165.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://cogentdatahub.com/ReleaseNotes.html","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://heartbleed.com/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139722163017074&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139757726426985&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139757819327350&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139757919027752&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139758572430452&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139765756720506&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139774054614965&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139774703817488&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139808058921905&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139817685517037&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139817727317190&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139817782017443&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139824923705461&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139824993005633&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139833395230364&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139835815211508&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139835844111589&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139836085512508&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139842151128341&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139843768401936&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139869720529462&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139869891830365&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139889113431619&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139889295732144&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905202427693&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905243827825&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905295427946&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905351928096&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905405728262&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905458328378&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905653828999&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905868529690&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140015787404650&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140075368411126&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140724451518351&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141287864628122&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0376.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0377.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0378.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0396.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/109","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/173","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/190","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/90","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/91","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57347","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57483","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57721","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57836","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57966","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57968","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/59139","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/59243","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/59347","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140605","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21670161","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.blackberry.com/btsc/KB35882","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2014/dsa-2896","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/32745","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/32764","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.f-secure.com/en/web/labs_global/fsc-2014-1","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://www.kb.cert.org/vuls/id/720951","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kerio.com/support/kerio-control/release-history","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20140407.txt","source":"secalert@redhat.com","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"secalert@redhat.com","tags":["Broken Link","Not Applicable","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/66690","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030026","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030074","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030077","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030078","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030079","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030080","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030081","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030082","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAMB3","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2165-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA14-098A","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://blog.torproject.org/blog/openssl-bug-cve-2014-0160","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1084875","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://code.google.com/p/mod-spdy/issues/detail?id=85","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://filezilla-project.org/versions.php?type=server","source":"secalert@redhat.com","tags":["Release Notes"]},{"url":"https://gist.github.com/chapmajs/10473815","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html","source":"secalert@redhat.com","tags":["Exploit","Permissions Required","Third Party Advisory"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.cert.fi/en/reports/2014/vulnerability788210.html","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory"]},{"url":"https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd","source":"secalert@redhat.com","tags":["Broken Link","Exploit","Third Party Advisory"]},{"url":"http://advisories.mageia.org/MGASA-2014-0165.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://cogentdatahub.com/ReleaseNotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://heartbleed.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139722163017074&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139757726426985&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139757819327350&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139757919027752&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139758572430452&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139765756720506&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139774054614965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139774703817488&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139808058921905&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139817685517037&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139817727317190&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139817782017443&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139824923705461&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139824993005633&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139833395230364&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139835815211508&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139835844111589&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139836085512508&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139842151128341&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139843768401936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139869720529462&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139869891830365&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139889113431619&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139889295732144&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905202427693&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905243827825&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905295427946&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905351928096&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905405728262&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905458328378&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905653828999&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=139905868529690&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140015787404650&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140075368411126&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140724451518351&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141287864628122&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0376.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0377.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0378.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0396.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/90","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/91","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/57968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/59139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/59243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/59347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21670161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.blackberry.com/btsc/KB35882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2014/dsa-2896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/32745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.exploit-db.com/exploits/32764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.f-secure.com/en/web/labs_global/fsc-2014-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.kb.cert.org/vuls/id/720951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kerio.com/support/kerio-control/release-history","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20140407.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Not Applicable","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/66690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAMB3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2165-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA14-098A","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://blog.torproject.org/blog/openssl-bug-cve-2014-0160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1084875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://code.google.com/p/mod-spdy/issues/detail?id=85","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://filezilla-project.org/versions.php?type=server","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://gist.github.com/chapmajs/10473815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04260637-4%257CdocLocale%253Den_US%257CcalledBy%253DSearch_Result&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://lists.apache.org/thread.html/ba661b0edd913b39ff129a32d855620dd861883ade05fd88a8ce517d%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/rf8e8c091182b45daa50d3557cad9b10bb4198e3f08cf8f1c66a1b08d%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Permissions Required","Third Party Advisory"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.cert.fi/en/reports/2014/vulnerability788210.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory"]},{"url":"https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0160","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}],"evaluatorImpact":"CVSS V2 scoring evaluates the impact of the vulnerability on the host where the vulnerability is located. When evaluating the impact of this vulnerability to your organization, take into account the nature of the data that is being protected and act according to your organization’s risk acceptance. While CVE-2014-0160 does not allow unrestricted access to memory on the targeted host, a successful exploit does leak information from memory locations which have the potential to contain particularly sensitive information, e.g., cryptographic keys and passwords.  Theft of this information could enable other attacks on the information system, the impact of which would depend on the sensitivity of the data and functions of that system."}},{"cve":{"id":"CVE-2010-5298","sourceIdentifier":"cve@mitre.org","published":"2014-04-14T22:38:08.590","lastModified":"2026-06-16T23:26:30.330","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment."},{"lang":"es","value":"Condición de carrera en la función ssl3_read_bytes en s3_pkt.c en OpenSSL hasta 1.0.1g, cuando SSL_MODE_RELEASE_BUFFERS está habilitado, permite a atacantes remotos inyectar datos a través de sesiones o causar una denegación de servicio (error de uso después de liberación y análisis sintáctico) a través de una conexión SSL en un entorno con múltiples hilos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1g","matchCriteriaId":"60BE88FD-28F9-4983-9D3A-0F82A5B230D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.13","matchCriteriaId":"504AA794-4421-422D-A1C7-BB5AE334FD55"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*","matchCriteriaId":"5991814D-CA77-4C25-90D2-DB542B17E0AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*","matchCriteriaId":"D2DF4815-B8CB-4AD3-B91D-2E09A8E318E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*","matchCriteriaId":"15FC9014-BD85-4382-9D04-C0703E901D7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*","matchCriteriaId":"1831D45A-EE6E-4220-8F8C-248B69520948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*","matchCriteriaId":"028ABA8F-4E7B-4CD0-B6FC-3A0941E254BA"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2014-0187.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/004_openssl.patch.sig","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140431828824371&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140544599631400&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141658880509699&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2014/04/13/1","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/58337","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58713","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58939","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58977","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59162","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59287","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59300","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59301","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59342","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59413","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59437","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59438","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59440","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59450","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59490","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59655","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59666","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59669","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59721","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-201407-05.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140876","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://svnweb.freebsd.org/ports/head/security/openssl/files/patch-ssl-s3_pkt.c?revision=351191&view=markup","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676529","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676655","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676879","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676889","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677527","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677836","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678167","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683332","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.blackberry.com/btsc/KB36051","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.fortiguard.com/advisory/FG-IR-14-018/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676356","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg24037783","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:090","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openbsd.org/errata55.html#004_openssl","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20140605.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/66801","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.tedunangst.com/flak/post/analysis-of-openssl-freelist-reuse","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0006.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA80","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10075","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://rt.openssl.org/Ticket/Display.html?id=2167&user=guest&pass=guest","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://rt.openssl.org/Ticket/Display.html?id=3265&user=guest&pass=guest","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://www.novell.com/support/kb/doc.php?id=7015271","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://advisories.mageia.org/MGASA-2014-0187.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/004_openssl.patch.sig","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140431828824371&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140544599631400&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141658880509699&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2014/04/13/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/58337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-201407-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://svnweb.freebsd.org/ports/head/security/openssl/files/patch-ssl-s3_pkt.c?revision=351191&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.blackberry.com/btsc/KB36051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.fortiguard.com/advisory/FG-IR-14-018/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg24037783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openbsd.org/errata55.html#004_openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20140605.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/66801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.tedunangst.com/flak/post/analysis-of-openssl-freelist-reuse","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA80","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rt.openssl.org/Ticket/Display.html?id=2167&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rt.openssl.org/Ticket/Display.html?id=3265&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.novell.com/support/kb/doc.php?id=7015271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-0139","sourceIdentifier":"secalert@redhat.com","published":"2014-04-15T14:55:04.137","lastModified":"2026-06-17T00:02:22.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, which might allow man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority."},{"lang":"es","value":"cURL y libcurl 7.1 anterior a 7.36.0, cuando utilizando las librerías OpenSSL, axtls, gsossl o gskit para TLS, reconoce una dirección IP comodín (wildcard) en el campo del asunto Common Name (CN) de un certificado X.509, lo cual permitiría a atacantes man-in-the-middle suplantar servidores SSL arbitrarios a través de un certificado manipulado emitido por una autoridad de certificación legítima."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.10.6:*:*:*:*:*:*:*","matchCriteriaId":"5D65CDC0-580B-42B3-97E8-69BE44CDB68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.10.7:*:*:*:*:*:*:*","matchCriteriaId":"01001EEA-AB99-4041-8188-38CEBE9C3031"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.10.8:*:*:*:*:*:*:*","matchCriteriaId":"31DB0DA3-88B7-43ED-8102-CEBC28524CE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.11.0:*:*:*:*:*:*:*","matchCriteriaId":"87596B6A-A7B3-4256-9982-45D3B6E3E018"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.11.1:*:*:*:*:*:*:*","matchCriteriaId":"0045855F-A707-415A-AC12-6981B68B08E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.11.2:*:*:*:*:*:*:*","matchCriteriaId":"B49807DC-0BDA-41F6-BB76-7C62328D245F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.12.0:*:*:*:*:*:*:*","matchCriteriaId":"0A78B6B8-9F4B-46AC-BB04-7EBADC690CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.12.1:*:*:*:*:*:*:*","matchCriteriaId":"EFE80B46-33F0-4338-AF37-9E7E31FC5E83"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.12.2:*:*:*:*:*:*:*","matchCriteriaId":"DD38D8C6-9EEE-4160-9353-773943A560B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.12.3:*:*:*:*:*:*:*","matchCriteriaId":"FD33549E-EFFB-466F-8B47-BE036D454693"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.13.0:*:*:*:*:*:*:*","matchCriteriaId":"16BB71C8-3564-4E69-A2C3-E9AB1F9EF20C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.13.1:*:*:*:*:*:*:*","matchCriteriaId":"4966AA12-15DB-44E5-84AF-9D7AF4A52F86"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.13.2:*:*:*:*:*:*:*","matchCriteriaId":"827B6C8A-59C4-4714-9406-5C8EB5073AB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.14.0:*:*:*:*:*:*:*","matchCriteriaId":"93A11305-E4FF-473B-9415-AF1F0E7A27D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.14.1:*:*:*:*:*:*:*","matchCriteriaId":"8444095B-AF8F-42B5-BD4D-9CBE9238E42D"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.15.0:*:*:*:*:*:*:*","matchCriteriaId":"C22F23AE-02AB-42F0-AA16-D2F8C94E5DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.15.1:*:*:*:*:*:*:*","matchCriteriaId":"B33DE520-BD2A-4499-B1F8-1439AE16AB57"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.15.2:*:*:*:*:*:*:*","matchCriteriaId":"041FCB20-E74F-4550-AC48-EE4E5875E118"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.15.3:*:*:*:*:*:*:*","matchCriteriaId":"D16DBA5E-582F-4648-932E-8A1EFB7FE3D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.15.4:*:*:*:*:*:*:*","matchCriteriaId":"A25323F4-7C67-4097-AD53-A6B9E6D96BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.15.5:*:*:*:*:*:*:*","matchCriteriaId":"36919682-F59E-4EC0-886C-AE967F636753"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.16.0:*:*:*:*:*:*:*","matchCriteriaId":"B45AF234-3651-4367-BFEF-8766F66FB138"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.16.1:*:*:*:*:*:*:*","matchCriteriaId":"E46A9126-A02E-44CD-885D-0956E0C87C2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.16.2:*:*:*:*:*:*:*","matchCriteriaId":"91E9C756-7FE3-4197-8C18-99CD1F49B0D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.16.3:*:*:*:*:*:*:*","matchCriteriaId":"88806B7D-5EFE-4F91-B115-732882D2C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.16.4:*:*:*:*:*:*:*","matchCriteriaId":"5BB9E8AB-B3EC-4743-B39B-7325EEB17233"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.17.0:*:*:*:*:*:*:*","matchCriteriaId":"5030FBB0-C95B-4ADE-BFC2-CCA37AAD019B"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.17.1:*:*:*:*:*:*:*","matchCriteriaId":"5513618A-6770-4292-95D1-68F55D8343CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.18.0:*:*:*:*:*:*:*","matchCriteriaId":"7494C01F-E9EC-406E-879A-B2045865E282"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.18.1:*:*:*:*:*:*:*","matchCriteriaId":"7DD9F894-4576-4ED1-9F55-4C27ECE7E058"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.18.2:*:*:*:*:*:*:*","matchCriteriaId":"49AFACAC-BBAF-469B-BF05-0478E987120F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.0:*:*:*:*:*:*:*","matchCriteriaId":"6A136E86-0697-4915-BC49-F570C776EDE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.1:*:*:*:*:*:*:*","matchCriteriaId":"ECB241AF-A01D-4FD6-B98A-F4C20F844C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.2:*:*:*:*:*:*:*","matchCriteriaId":"C5B61901-F7DF-4805-8EB7-CA1701CA81CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.3:*:*:*:*:*:*:*","matchCriteriaId":"EB0CDEC9-224A-4668-B2E4-2145653E3F2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.4:*:*:*:*:*:*:*","matchCriteriaId":"E92BE9CB-F001-47A0-94E0-48FC01A63FE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.5:*:*:*:*:*:*:*","matchCriteriaId":"324E2A20-2F66-4E03-9A7F-A09E631E9033"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.6:*:*:*:*:*:*:*","matchCriteriaId":"C8987B53-BD80-40B9-8429-21AD97208040"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.19.7:*:*:*:*:*:*:*","matchCriteriaId":"490D1BDC-33B9-43BA-B6DA-42DEE577082A"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.20.0:*:*:*:*:*:*:*","matchCriteriaId":"B465BE7E-0B4D-4BC4-894B-3F51A201CE91"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.20.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA17087-3021-4961-B53C-CDCC872A31A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.0:*:*:*:*:*:*:*","matchCriteriaId":"E5CA3936-4602-40E6-B75C-58D3F24268E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.1:*:*:*:*:*:*:*","matchCriteriaId":"D87C110C-21DD-438A-90EF-BE516CF59F3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.2:*:*:*:*:*:*:*","matchCriteriaId":"AD2D9E0E-2EED-4FB5-859C-05226FC48D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.3:*:*:*:*:*:*:*","matchCriteriaId":"7CA01E21-71CE-4B07-B5A6-D0D7AC493A5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.4:*:*:*:*:*:*:*","matchCriteriaId":"51239254-31CE-4BF7-8669-1525BA391362"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.5:*:*:*:*:*:*:*","matchCriteriaId":"2E2BE20D-232D-4C86-81B0-C82CCC1CAA62"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.6:*:*:*:*:*:*:*","matchCriteriaId":"D652FD7C-1521-4391-AAE1-0A4D6F4CE8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.21.7:*:*:*:*:*:*:*","matchCriteriaId":"DB861143-F809-45CF-95BE-E64F4BA1A0DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.22.0:*:*:*:*:*:*:*","matchCriteriaId":"E3480F4A-0AE0-4428-9EDA-5A6B994909A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.23.0:*:*:*:*:*:*:*","matchCriteriaId":"936BF59E-33A8-46BA-9FBD-8763812E2F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.23.1:*:*:*:*:*:*:*","matchCriteriaId":"33168C81-6DAE-40D6-9693-68390CD71DA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.24.0:*:*:*:*:*:*:*","matchCriteriaId":"424F9604-AA9A-4D45-A521-0BDEDB723659"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.25.0:*:*:*:*:*:*:*","matchCriteriaId":"DC6EBCEB-E52C-4FF5-B15A-6960F58090EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.26.0:*:*:*:*:*:*:*","matchCriteriaId":"D204E994-4591-403C-8EF3-D3B7BF4AA1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.27.0:*:*:*:*:*:*:*","matchCriteriaId":"EBF5418D-1162-4B1E-BC3D-06A3E084BEFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.28.0:*:*:*:*:*:*:*","matchCriteriaId":"1CA65F31-3D54-4F66-A0A3-2BD993FF38F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.28.1:*:*:*:*:*:*:*","matchCriteriaId":"41ACC9FE-62FF-424B-B4B8-B033FEAF7686"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.29.0:*:*:*:*:*:*:*","matchCriteriaId":"F8BC39E9-5945-4DC8-ACA8-1C9918D9F279"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.30.0:*:*:*:*:*:*:*","matchCriteriaId":"B9658447-FBB0-4DEA-8FEE-BD4D3D1BF7FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.31.0:*:*:*:*:*:*:*","matchCriteriaId":"5ECABFCB-0D02-4B5B-BB35-C6B3C0896348"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.32.0:*:*:*:*:*:*:*","matchCriteriaId":"5A5176F0-E62F-46FF-B536-DC0680696773"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.33.0:*:*:*:*:*:*:*","matchCriteriaId":"506A3761-3D24-43DB-88D8-4EB5B9E8BA5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.34.0:*:*:*:*:*:*:*","matchCriteriaId":"0B6EF8B0-0E86-449C-A500-ACD902A78C7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:7.35.0:*:*:*:*:*:*:*","matchCriteriaId":"4D558CC2-0146-4887-834E-19FCB1D512A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.10.6:*:*:*:*:*:*:*","matchCriteriaId":"2E1F9453-1FB6-4CA7-9285-A243E56667B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.10.7:*:*:*:*:*:*:*","matchCriteriaId":"F79828BB-2412-46AD-BE3C-A51B48E191AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.10.8:*:*:*:*:*:*:*","matchCriteriaId":"72D0F13F-D56F-4C1C-A3CF-2E4E704817CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.11.0:*:*:*:*:*:*:*","matchCriteriaId":"90A4F2E2-1B43-470E-8935-CB32F12A0124"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.11.1:*:*:*:*:*:*:*","matchCriteriaId":"797DF5C7-509E-48FD-BD04-C66E01748728"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.11.2:*:*:*:*:*:*:*","matchCriteriaId":"47BD868A-CE3B-4E39-A588-C4EDA3265A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.12.0:*:*:*:*:*:*:*","matchCriteriaId":"4A2EE400-1C36-40F4-A9D1-9AB432F168BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.12.1:*:*:*:*:*:*:*","matchCriteriaId":"06E3CB14-FB16-4F4E-9AD9-A02DC727FF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.12.2:*:*:*:*:*:*:*","matchCriteriaId":"08DCC42C-C881-4AEA-9348-E8317C54D62B"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.12.3:*:*:*:*:*:*:*","matchCriteriaId":"2BC4EF5A-C8CB-4F33-B4D1-E4192B179D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.13.0:*:*:*:*:*:*:*","matchCriteriaId":"81CEF54A-9668-4031-926F-9B978DD5CDF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.13.1:*:*:*:*:*:*:*","matchCriteriaId":"45068C90-8915-4D19-B36B-993980E28D08"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.13.2:*:*:*:*:*:*:*","matchCriteriaId":"24543011-2458-47B5-984A-901E70084902"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.14.0:*:*:*:*:*:*:*","matchCriteriaId":"FB482A9C-D577-4AEE-A08F-CAFA6586B51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.14.1:*:*:*:*:*:*:*","matchCriteriaId":"65AF9B86-A555-4D5E-B24E-9EBF78BCD8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.15.0:*:*:*:*:*:*:*","matchCriteriaId":"60BBDF07-DB97-433E-B542-EFEBE45550DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.15.1:*:*:*:*:*:*:*","matchCriteriaId":"CA8BE3F8-82ED-4DD7-991E-979E950C98B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.15.2:*:*:*:*:*:*:*","matchCriteriaId":"738AA231-4694-46E8-B559-1594263A9987"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.15.3:*:*:*:*:*:*:*","matchCriteriaId":"E9E1F171-B887-499A-BF4F-538EBF347811"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.15.4:*:*:*:*:*:*:*","matchCriteriaId":"07AA276A-0EBA-4DC9-951C-8F8159FAC7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.15.5:*:*:*:*:*:*:*","matchCriteriaId":"8DEEF534-9AD2-4439-9D69-E91D062C4647"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.16.0:*:*:*:*:*:*:*","matchCriteriaId":"63643BE1-C978-4CD2-8ED1-2B979DB0676E"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.16.1:*:*:*:*:*:*:*","matchCriteriaId":"F6FA04A0-9258-4654-ABCF-F41340B1FA35"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.16.2:*:*:*:*:*:*:*","matchCriteriaId":"DE829230-AFDB-4131-9C6A-D9D7A66C5B57"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B7E8BA30-8087-48D4-AE1B-48326FF826B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.16.4:*:*:*:*:*:*:*","matchCriteriaId":"47970EFF-2F51-4875-A6BD-E30614E13278"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.17.0:*:*:*:*:*:*:*","matchCriteriaId":"52C9B668-3204-41C5-A82E-262BDFA541DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.17.1:*:*:*:*:*:*:*","matchCriteriaId":"08C8EE1E-E186-42D6-8B12-05865C73F261"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.18.0:*:*:*:*:*:*:*","matchCriteriaId":"EEA3D88B-41B9-4D79-B47D-B3D6058C0C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.18.1:*:*:*:*:*:*:*","matchCriteriaId":"C2C80901-D48E-4C2A-9BED-A40007A11C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.18.2:*:*:*:*:*:*:*","matchCriteriaId":"331A51E4-AA73-486F-9618-5A83965F2436"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.0:*:*:*:*:*:*:*","matchCriteriaId":"EB32DF2C-9208-4853-ADEB-B00D764D7467"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.1:*:*:*:*:*:*:*","matchCriteriaId":"E05636DC-7E38-4605-AAB8-81C0AE37520A"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.2:*:*:*:*:*:*:*","matchCriteriaId":"624DF2F1-53FD-48D3-B93D-44E99C9C0C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.3:*:*:*:*:*:*:*","matchCriteriaId":"F2171C7C-311A-4405-B95F-3A54966FA844"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.4:*:*:*:*:*:*:*","matchCriteriaId":"5DE20A41-8B53-46FC-9002-69CC7495171F"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.5:*:*:*:*:*:*:*","matchCriteriaId":"87ED9DA0-E880-4CBB-B1AC-5AEE8A004718"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.6:*:*:*:*:*:*:*","matchCriteriaId":"5293C7F0-BF9F-4768-889A-876CE78903CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.19.7:*:*:*:*:*:*:*","matchCriteriaId":"F3EB41B3-65F3-4B0E-8CCC-325B14AF605B"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.20.0:*:*:*:*:*:*:*","matchCriteriaId":"857B244C-2AFB-40C7-A893-7C6DE9871BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.20.1:*:*:*:*:*:*:*","matchCriteriaId":"B732CE55-820A-40E0-A885-71BBB6CF8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.0:*:*:*:*:*:*:*","matchCriteriaId":"0455A5F2-1515-4CD8-BA2F-74D28E91A661"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.1:*:*:*:*:*:*:*","matchCriteriaId":"29034B3A-BE9D-4D68-8C56-4465C03C3693"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.2:*:*:*:*:*:*:*","matchCriteriaId":"6249538E-FBCB-4130-91FB-DA78D7BA45DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.3:*:*:*:*:*:*:*","matchCriteriaId":"5E11B8A5-50A2-468F-BFB3-86DD9D28AC73"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.4:*:*:*:*:*:*:*","matchCriteriaId":"9EAE25A0-3828-46F1-AB30-88732CBC9F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.5:*:*:*:*:*:*:*","matchCriteriaId":"1533A85C-2160-445D-8787-E624AEDC5A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.6:*:*:*:*:*:*:*","matchCriteriaId":"D87B9393-7EA4-43DA-900C-7E840AE2D4C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.21.7:*:*:*:*:*:*:*","matchCriteriaId":"7D1249E9-304F-4952-8DAB-8B79CE5E7D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.22.0:*:*:*:*:*:*:*","matchCriteriaId":"83FAF953-6A65-4FAB-BDB5-03B468CD1C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.23.0:*:*:*:*:*:*:*","matchCriteriaId":"29F8FF1F-A639-4161-9366-62528AAF4C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.23.1:*:*:*:*:*:*:*","matchCriteriaId":"812AB429-379A-4EDE-9664-5BC2989053F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.24.0:*:*:*:*:*:*:*","matchCriteriaId":"13DD791F-C4BD-4456-955A-92E84082AA09"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.25.0:*:*:*:*:*:*:*","matchCriteriaId":"4A17E442-45AA-4780-98B4-9BF764DCC1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.26.0:*:*:*:*:*:*:*","matchCriteriaId":"F6AF544C-5F16-4434-B9FB-93B1B7318950"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.27.0:*:*:*:*:*:*:*","matchCriteriaId":"CBFD9ED9-2412-44AE-9C55-0ED03A121B23"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.28.0:*:*:*:*:*:*:*","matchCriteriaId":"67CCE31B-ABDA-4F32-BAF1-B1AD0664B3E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.28.1:*:*:*:*:*:*:*","matchCriteriaId":"9E66A332-ECD1-4452-B444-FB629022FDF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.29.0:*:*:*:*:*:*:*","matchCriteriaId":"CDD3D599-35E9-4590-B5E0-3AF04D344695"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.30.0:*:*:*:*:*:*:*","matchCriteriaId":"A3B6BFFB-7967-482C-9B49-4BD25C815299"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.31.0:*:*:*:*:*:*:*","matchCriteriaId":"1791BF6D-2C96-4A6E-90D4-2906A73601F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.32.0:*:*:*:*:*:*:*","matchCriteriaId":"260DD751-4145-4B75-B892-5FC932C6A305"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.33.0:*:*:*:*:*:*:*","matchCriteriaId":"EFF4AD0D-2EC5-4CE8-B6B3-2EC8ED2FF118"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.34.0:*:*:*:*:*:*:*","matchCriteriaId":"3EB1CB85-0A9B-4816-B471-278774EE6D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:libcurl:7.35.0:*:*:*:*:*:*:*","matchCriteriaId":"3831AB03-4E7E-476D-9623-58AADC188DFE"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0165.html","source":"secalert@redhat.com"},{"url":"http://curl.haxx.se/docs/adv_20140326B.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-04/msg00042.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57836","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57966","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/57968","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/58615","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59458","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675820","source":"secalert@redhat.com"},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-2902","source":"secalert@redhat.com"},{"url":"http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/","source":"secalert@redhat.com"},{"url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/","source":"secalert@redhat.com"},{"url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:213","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2167-1","source":"secalert@redhat.com"},{"url":"http://advisories.mageia.org/MGASA-2015-0165.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://curl.haxx.se/docs/adv_20140326B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-04/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/58615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2167-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-2734","sourceIdentifier":"cve@mitre.org","published":"2014-04-24T23:55:05.707","lastModified":"2026-06-17T00:07:04.917","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, which allows remote attackers to spoof signatures within the context of a Ruby script that attempts signature verification after performing a certain sequence of filesystem operations.  NOTE: this issue has been disputed by the Ruby OpenSSL team and third parties, who state that the original demonstration PoC contains errors and redundant or unnecessarily-complex code that does not appear to be related to a demonstration of the issue. As of 20140502, CVE is not aware of any public comment by the original researcher"},{"lang":"es","value":"** DISPUTADA ** La extensión openssl en Ruby 2.x no mantiene correctamente el estado de la memoria de procesos después de la reapertura de un fichero, lo que permite a atacantes remotos falsificar firmas dentro del contexto de una secuencia de comandos Ruby que intenta la verificación de firmas después de realizar cierta secuencia de operaciones del sistema de ficheros. NOTA: este problema ha sido disputado por el equipo OpenSSL de Ruby y terceras partes, que dicen que la demostración PoC original contiene errores y código redundante o innecesariamente complejo que no parece estar relacionado con una demostración del problema. Desde 02052014, CVE no está consciente de ningún comentario público por parte del investigador original."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0:*:*:*:*:*:*:*","matchCriteriaId":"90E0471D-1323-4E67-B66C-DEBF3BBAEEAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B03B7561-A854-4EFA-9E4E-CFC4EEAE4EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p0:*:*:*:*:*:*","matchCriteriaId":"D2423B85-0971-42AC-8B64-819008BC5778"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:*","matchCriteriaId":"1C663278-3B2A-4B7C-959A-2AA804467F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p247:*:*:*:*:*:*","matchCriteriaId":"B7927149-A76A-48BC-8405-7375FC7D7486"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:preview1:*:*:*:*:*:*","matchCriteriaId":"CB116A84-1652-4F5D-98AC-81F0349EEDC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:preview2:*:*:*:*:*:*","matchCriteriaId":"259C21E7-6084-4710-9BB3-C232942A451E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"285A3431-BDFE-40C5-92CD-B18217757C23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"D66B32CB-AC49-4A1C-85ED-6389F27CB319"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.1:-:*:*:*:*:*:*","matchCriteriaId":"77020036-DC99-461B-9A36-E8C0BE44E6B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.1:preview1:*:*:*:*:*:*","matchCriteriaId":"7A2C6617-222D-4EA3-A194-4D69B10197DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8DF046E4-503B-4A10-BEAB-3144BD86EA49"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/126218/Ruby-OpenSSL-Private-Key-Spoofing.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/231","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2014/May/13","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/106006","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/66956","source":"cve@mitre.org"},{"url":"https://gist.github.com/10446549","source":"cve@mitre.org"},{"url":"https://gist.github.com/emboss/91696b56cd227c8a0c13","source":"cve@mitre.org"},{"url":"https://github.com/adrienthebo/cve-2014-2734/","source":"cve@mitre.org"},{"url":"https://news.ycombinator.com/item?id=7601973","source":"cve@mitre.org"},{"url":"https://www.ruby-lang.org/en/news/2014/05/09/dispute-of-vulnerability-cve-2014-2734/","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/126218/Ruby-OpenSSL-Private-Key-Spoofing.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2014/Apr/231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://seclists.org/fulldisclosure/2014/May/13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/106006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/66956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gist.github.com/10446549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gist.github.com/emboss/91696b56cd227c8a0c13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/adrienthebo/cve-2014-2734/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://news.ycombinator.com/item?id=7601973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.ruby-lang.org/en/news/2014/05/09/dispute-of-vulnerability-cve-2014-2734/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-7373","sourceIdentifier":"cve@mitre.org","published":"2014-04-29T20:55:09.013","lastModified":"2026-06-17T00:01:51.143","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Android before 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging use of the PRNG within multiple applications."},{"lang":"es","value":"Android anterior a 4.4 no ejecuta debidamente la creación de semillas del PRNG OpenSSL, lo que facilita a atacantes anular mecanismos de protección criptográficos mediante el aprovechamiento del uso del PRNG dentro de múltiples aplicaciones."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.1","matchCriteriaId":"7C2C07AF-6B89-4B53-826B-BBB1E1A61D33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0721FD34-5F94-4828-A8AA-EF70FAB71FC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:1.1:*:*:*:*:*:*:*","matchCriteriaId":"73CA4D29-321A-41ED-A75A-1EBB14A771C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*","matchCriteriaId":"8C354829-6BEB-4C67-972A-60367073753C"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:1.6:*:*:*:*:*:*:*","matchCriteriaId":"702B40EB-76BC-4686-A46E-D02DBE3A86E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4685EA90-1E01-4FFB-AE31-91FD5D69E2D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"938DC86D-C783-4EFA-9AB6-3ADC8CD7BB41"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A33DBF65-09A6-4149-BABE-2FFFBF10C31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.2:*:*:*:*:*:*:*","matchCriteriaId":"78B69434-13B2-4A43-AEB0-55E0ED403E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.2:rev1:*:*:*:*:*:*","matchCriteriaId":"D1755B91-1B6B-4A9E-BB6B-22B399A6DD02"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1A92E88F-CCED-41D7-AFB7-CE1F9265E546"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D13D3A00-27A0-4635-9D50-05CA81950691"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4EB959DB-AFE7-4667-9662-949ADAB81CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.3:*:*:*:*:*:*:*","matchCriteriaId":"18669EEC-ABB9-4CE4-8C0E-A88BE08EC368"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.3:rev1:*:*:*:*:*:*","matchCriteriaId":"61D64B87-F1F1-4E52-86AE-F28E2C43A9A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"83AB2497-59DE-4253-A758-A3D03FAEB913"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"6E197EC0-82DF-49D5-BD1A-7EA22EC0B806"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"286EED24-E011-4009-BC2E-B63CA06072CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D634E2E3-4E8A-4C88-A6BF-DBE7439EB3B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"77E6F4DF-F80F-4A9B-871E-155C0D3DD449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"5CC08431-C70E-4964-B7C0-C9C45F70DCD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"3A2A79C6-A7BD-46C2-8320-B9652135F3BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6997F035-D2F5-4174-B979-5D42FF69D9AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E1FD2E59-59BF-4611-B65B-A2981127CAC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:3.2:*:*:*:*:*:*:*","matchCriteriaId":"86BFE05E-9749-43AA-8DB6-E2F13C2E1759"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"48DCE4AD-D629-4F0B-AFA8-6CAD061D5FA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"4DAAB25F-26E4-4493-B3DA-F87240633031"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"96CD6B49-B9D4-493E-902D-B4EF48260BB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"FB73EBA4-A9BE-4C40-9E6D-649E89D2C3F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"}]}]}],"references":[{"url":"http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html","source":"cve@mitre.org"},{"url":"http://emboss.github.io/blog/2013/08/21/openssl-prng-is-not-really-fork-safe/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=openssl-dev&m=130289811108150&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=openssl-dev&m=130298304903422&w=2","source":"cve@mitre.org"},{"url":"http://www.reddit.com/r/Android/comments/1k6f03/due_to_a_serious_encryptionrng_flaw_in_android/cblvum5","source":"cve@mitre.org"},{"url":"http://android-developers.blogspot.com.au/2013/08/some-securerandom-thoughts.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://emboss.github.io/blog/2013/08/21/openssl-prng-is-not-really-fork-safe/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=openssl-dev&m=130289811108150&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=openssl-dev&m=130298304903422&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.reddit.com/r/Android/comments/1k6f03/due_to_a_serious_encryptionrng_flaw_in_android/cblvum5","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-0198","sourceIdentifier":"secalert@redhat.com","published":"2014-05-06T10:44:05.470","lastModified":"2026-06-17T00:02:29.623","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition."},{"lang":"es","value":"La función do_ssl3_write en s3_pkt.c en OpenSSL 1.x hasta 1.0.1g, cuando SSL_MODE_RELEASE_BUFFERS está habilitado, no maneja debidamente un puntero de buffer durante ciertas llamadas recursivas, lo que permite a atacantes remotos causar una denegación de servicio (referencia a puntero nulo y caída de aplicación) a través de vectores que provocan una condición de alerta."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"1.0.1g","matchCriteriaId":"76A30D0D-40AB-4293-A783-4EF9CBBDC925"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.13","matchCriteriaId":"504AA794-4421-422D-A1C7-BB5AE334FD55"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*","matchCriteriaId":"5991814D-CA77-4C25-90D2-DB542B17E0AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*","matchCriteriaId":"DFBF430B-0832-44B0-AA0E-BA9E467F7668"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*","matchCriteriaId":"D2DF4815-B8CB-4AD3-B91D-2E09A8E318E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*","matchCriteriaId":"15FC9014-BD85-4382-9D04-C0703E901D7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*","matchCriteriaId":"1831D45A-EE6E-4220-8F8C-248B69520948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*","matchCriteriaId":"028ABA8F-4E7B-4CD0-B6FC-3A0941E254BA"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2014-0204.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00036.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00037.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140431828824371&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140544599631400&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141658880509699&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://puppetlabs.com/security/cve/cve-2014-0198","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/58337","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58667","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58713","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58714","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58939","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58945","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58977","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59126","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59162","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59163","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59190","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59202","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59264","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59282","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59284","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59287","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59300","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59301","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59306","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59310","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59342","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59374","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59398","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59413","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59437","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59438","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59440","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59449","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59450","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59490","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59491","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59514","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59525","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59529","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59655","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59666","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59669","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59721","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59784","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59990","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/60049","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/60066","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/60571","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/61254","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-201407-05.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140876","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15329.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676529","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676655","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676879","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676889","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677527","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677836","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678167","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683332","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.blackberry.com/btsc/KB36051","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2931","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/FG-IR-14-018/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676356","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg24037783","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:080","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openbsd.org/errata55.html#005_openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20140605.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/67193","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1093837","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA80","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10075","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://rt.openssl.org/Ticket/Display.html?user=guest&pass=guest&id=3321","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.novell.com/support/kb/doc.php?id=7015271","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://advisories.mageia.org/MGASA-2014-0204.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-05/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140431828824371&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140544599631400&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141658880509699&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://puppetlabs.com/security/cve/cve-2014-0198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/58337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/60049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/60066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/60571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/61254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-201407-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15329.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.blackberry.com/btsc/KB36051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/FG-IR-14-018/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg24037783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openbsd.org/errata55.html#005_openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20140605.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/67193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1093837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA80","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rt.openssl.org/Ticket/Display.html?user=guest&pass=guest&id=3321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.novell.com/support/kb/doc.php?id=7015271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-0195","sourceIdentifier":"secalert@redhat.com","published":"2014-06-05T21:55:06.147","lastModified":"2026-06-17T00:02:28.647","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment."},{"lang":"es","value":"La función dtls1_reassemble_fragment en d1_both.c en OpenSSL anterior a 0.9.8za, 1.0.0 anterior a 1.0.0m y 1.0.1 anterior a 1.0.1h no valida debidamente longitudes de fragmentos en mensajes DTLS ClientHello, lo que permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (desbordamiento de buffer y caída de aplicación) a través de un fragmento no inicial largo."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"0.9.8","versionEndExcluding":"0.9.8za","matchCriteriaId":"A76549B9-167E-40BD-94E8-785723A69C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.0m","matchCriteriaId":"126D6450-A9AC-4646-879E-3F53482AADD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.1","versionEndExcluding":"1.0.1h","matchCriteriaId":"0B107973-BC4B-450F-A083-7C89DE05328B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.13","matchCriteriaId":"504AA794-4421-422D-A1C7-BB5AE334FD55"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*","matchCriteriaId":"5991814D-CA77-4C25-90D2-DB542B17E0AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Once-Bled-Twice-Shy-OpenSSL-CVE-2014-0195/ba-p/6501048","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/ZDI-14-173-CVE-2014-0195-OpenSSL-DTLS-Fragment-Out-of-Bounds/ba-p/6501002","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140266410314613&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140317760000786&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140431828824371&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140482916501310&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140491231331543&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140499827729550&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"secalert@redhat.com","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/58337","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58615","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58660","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58713","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58714","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58743","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58883","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58939","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58945","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58977","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59040","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59126","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59162","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59175","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59188","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59189","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59192","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59223","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59287","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59300","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59301","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59305","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59306","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59310","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59342","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59364","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59365","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59413","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59429","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59437","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59441","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59449","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59450","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59451","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59454","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59490","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59491","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59514","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59518","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59528","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59530","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59587","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59655","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59659","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59666","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59669","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59721","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59784","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59895","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59990","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/60571","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/61254","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-201407-05.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT6443","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140876","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15356.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675821","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676071","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676644","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676879","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676889","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677527","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678167","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678289","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683332","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.blackberry.com/btsc/KB36051","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.f-secure.com/en/web/labs_global/fsc-2014-6","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/FG-IR-14-018/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676356","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676793","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg24037783","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:106","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.openssl.org/news/secadv_20140605.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/67900","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030337","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103598","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=1632ef744872edc2aa2a53d487d3e79c965a4ad3","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA80","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10075","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.novell.com/support/kb/doc.php?id=7015271","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Once-Bled-Twice-Shy-OpenSSL-CVE-2014-0195/ba-p/6501048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/ZDI-14-173-CVE-2014-0195-OpenSSL-DTLS-Fragment-Out-of-Bounds/ba-p/6501002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140266410314613&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140317760000786&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140431828824371&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140482916501310&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140491231331543&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140499827729550&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/58337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/60571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/61254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-201407-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT6443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15356.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.blackberry.com/btsc/KB36051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.f-secure.com/en/web/labs_global/fsc-2014-6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/FG-IR-14-018/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg24037783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openssl.org/news/secadv_20140605.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/67900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=1632ef744872edc2aa2a53d487d3e79c965a4ad3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA80","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.novell.com/support/kb/doc.php?id=7015271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-0221","sourceIdentifier":"secalert@redhat.com","published":"2014-06-05T21:55:06.207","lastModified":"2026-06-17T00:02:32.707","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake."},{"lang":"es","value":"La función dtls1_get_message_fragment en d1_both.c en OpenSSL anterior a 0.9.8za, 1.0.0 anterior a 1.0.0m y 1.0.1 anterior a 1.0.1h permite a atacantes remotos causar una denegación de servicio (recursión y caída de cliente) a través de un mensaje DTLS hello en una negociación DTLS inválida."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"0.9.8","versionEndExcluding":"0.9.8za","matchCriteriaId":"A76549B9-167E-40BD-94E8-785723A69C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.0m","matchCriteriaId":"126D6450-A9AC-4646-879E-3F53482AADD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.1","versionEndExcluding":"1.0.1h","matchCriteriaId":"0B107973-BC4B-450F-A083-7C89DE05328B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:storage:2.1:*:*:*:*:*:*:*","matchCriteriaId":"53C986BD-2D1F-4865-B16D-72FD875E3776"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*","matchCriteriaId":"20294CE7-12C8-43CA-A702-5ED2A3044FFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*","matchCriteriaId":"AA9B3CC0-DF1C-4A86-B2A3-A9D428A5A6E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.13","matchCriteriaId":"504AA794-4421-422D-A1C7-BB5AE334FD55"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*","matchCriteriaId":"5991814D-CA77-4C25-90D2-DB542B17E0AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*","matchCriteriaId":"D2DF4815-B8CB-4AD3-B91D-2E09A8E318E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*","matchCriteriaId":"15FC9014-BD85-4382-9D04-C0703E901D7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*","matchCriteriaId":"1831D45A-EE6E-4220-8F8C-248B69520948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*","matchCriteriaId":"028ABA8F-4E7B-4CD0-B6FC-3A0941E254BA"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://linux.oracle.com/errata/ELSA-2014-1053.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140266410314613&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140317760000786&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140431828824371&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140482916501310&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140491231331543&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140499827729550&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1021.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/58337","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58615","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58713","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58714","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58939","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58945","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58977","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59027","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59120","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59126","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59162","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59167","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59175","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59189","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59192","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59221","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59284","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59287","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59300","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59301","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59306","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59310","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59342","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59364","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59365","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59413","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59429","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59437","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59441","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59449","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59450","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59451","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59454","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59460","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59490","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59491","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59495","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59514","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59518","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59528","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59655","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59659","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59666","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59669","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59721","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59784","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59895","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59990","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/60571","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/60687","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/61254","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-201407-05.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT6443","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140876","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675821","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676071","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676879","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676889","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677527","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678167","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678289","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683332","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.blackberry.com/btsc/KB36051","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/FG-IR-14-018/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676226","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676356","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676793","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg24037783","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:105","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:106","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7015264","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7015300","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20140605.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/67901","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030337","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103593","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=d3152655d5319ce883c8e3ac4b99f8de4c59d846","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA80","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10075","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.novell.com/support/kb/doc.php?id=7015271","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://linux.oracle.com/errata/ELSA-2014-1053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140266410314613&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140317760000786&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140431828824371&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140482916501310&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140491231331543&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140499827729550&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/58337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/60571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/60687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/61254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-201407-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT6443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.blackberry.com/btsc/KB36051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/FG-IR-14-018/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg24037783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7015264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7015300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20140605.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/67901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1030337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=d3152655d5319ce883c8e3ac4b99f8de4c59d846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA80","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.novell.com/support/kb/doc.php?id=7015271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-0224","sourceIdentifier":"secalert@redhat.com","published":"2014-06-05T21:55:07.817","lastModified":"2026-06-17T00:02:33.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the \"CCS Injection\" vulnerability."},{"lang":"es","value":"OpenSSL anterior a 0.9.8za, 1.0.0 anterior a 1.0.0m y 1.0.1 anterior a 1.0.1h no restringe debidamente el procesamiento de mensajes ChangeCipherSpec, lo que permite a atacantes man-in-the-middle provocar el uso de una clave maestra de longitud cero en ciertas comunicaciones OpenSSL-a-OpenSSL, y como consecuencia secuestrar sesiones u obtener información sensible, a través de una negociación TLS manipulada, también conocido como la vulnerabilidad de 'inyección CCS'."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.8za","matchCriteriaId":"8FA55B3F-13D6-4DB6-A215-544A4CB44144"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.0m","matchCriteriaId":"126D6450-A9AC-4646-879E-3F53482AADD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.1","versionEndExcluding":"1.0.1h","matchCriteriaId":"0B107973-BC4B-450F-A083-7C89DE05328B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"46849C8D-36E9-4E97-BB49-E04F4EB199E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"ABC1CA30-C6BE-411C-9EA1-D12B48B3556D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"38F66D5B-F906-437E-977E-F9F930648886"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"25FD2879-A940-4EC7-9636-71E2A1ECFB36"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:storage:2.1:*:*:*:*:*:*:*","matchCriteriaId":"53C986BD-2D1F-4865-B16D-72FD875E3776"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*","matchCriteriaId":"5991814D-CA77-4C25-90D2-DB542B17E0AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4:*:*:*:*:*:*:*","matchCriteriaId":"CA2C244C-82F6-49BC-B7F7-54AB989C43E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*","matchCriteriaId":"AA9B3CC0-DF1C-4A86-B2A3-A9D428A5A6E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:filezilla-project:filezilla_server:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.45","matchCriteriaId":"6DE46452-FB3D-4472-B5E8-867A925410F0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:application_processing_engine_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.2","matchCriteriaId":"056484D7-6824-4D2C-9CB9-119E9F98AD9D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:application_processing_engine:-:*:*:*:*:*:*:*","matchCriteriaId":"AE6A8466-8A69-491B-8DAB-877A6C2F6660"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:cp1543-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.25","matchCriteriaId":"2F9DB366-2F2A-4A24-95AA-1389E87563FE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:cp1543-1:-:*:*:*:*:*:*:*","matchCriteriaId":"970C7CDA-4BFF-44EC-B26B-1BA5415DA01D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:s7-1500_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.6","matchCriteriaId":"C7E99CFB-7509-4C84-862D-B95B9151AE19"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:s7-1500:-:*:*:*:*:*:*:*","matchCriteriaId":"4BDF192C-15CD-4A0A-933C-50F61A578CB4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:rox_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"1.16.1","matchCriteriaId":"E844A484-1DD6-4225-8634-8E722A42F7FD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:rox:-:*:*:*:*:*:*:*","matchCriteriaId":"EFE77730-43FD-40A6-89C0-83EF6CC25F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.13","matchCriteriaId":"504AA794-4421-422D-A1C7-BB5AE334FD55"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionStartIncluding":"2.7.0","versionEndExcluding":"2.7.8","matchCriteriaId":"3E972B9F-0AAD-4076-8B19-55161B67E6FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.2","matchCriteriaId":"77B49A11-B6B3-417A-8142-FA0967D4E684"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionEndExcluding":"0.10.29","matchCriteriaId":"650C774B-058F-4898-8E3F-3D65BD28BD2E"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://ccsinjection.lepidum.co.jp","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://dev.mysql.com/doc/relnotes/workbench/en/wb-news-6-1-7.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://esupport.trendmicro.com/solution/en-US/1103813.aspx","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29217","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://linux.oracle.com/errata/ELSA-2014-1053.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140266410314613&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140317760000786&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140369637402535&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140386311427810&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140431828824371&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140482916501310&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140491231331543&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140499864129699&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140544599631400&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140604261522465&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140672208601650&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140784085708882&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140794476212181&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140852757108392&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140852826008699&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140870499402361&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140983229106599&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141025641601169&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141147110427269&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141164638606214&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141383410222440&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141383465822787&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141658880509699&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142350350616251&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142546741516006&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142805027510172&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://puppetlabs.com/security/cve/cve-2014-0224","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0624.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0626.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0627.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0630.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0631.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0632.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0633.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0680.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Jun/38","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/58128","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58337","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58385","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58433","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58492","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58579","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58615","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58639","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58660","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58667","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58713","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58714","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58716","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58719","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58742","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58743","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58745","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58930","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58939","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58945","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58977","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59004","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59012","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59040","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59043","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59055","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59063","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59093","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59101","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59120","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59126","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59132","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59135","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59142","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59162","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59163","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59167","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59175","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59186","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59188","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59189","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59190","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59191","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59192","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59202","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59211","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59214","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59215","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59223","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59231","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59264","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59282","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59284","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59287","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59300","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59301","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59305","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59306","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59310","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59325","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59338","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59342","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59347","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59354","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59362","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59364","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59365","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59368","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59370","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59374","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59375","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59380","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59383","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59389","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59413","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59429","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59435","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59437","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59438","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59440","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59441","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59442","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59444","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59445","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59446","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59447","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59448","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59449","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59450","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59451","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59454","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59459","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59460","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59483","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59490","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59491","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59495","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59502","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59506","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59514","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59518","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59525","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59528","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59529","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59530","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59589","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59602","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59655","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59659","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59661","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59666","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59669","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59677","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59721","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59784","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59824","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59827","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59878","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59885","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59894","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59916","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59990","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60049","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60066","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60176","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60522","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60567","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60571","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60577","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60819","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61254","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61815","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201407-05.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT6443","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140876","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15325.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020172","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004690","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV61506","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675626","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675821","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676071","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676333","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676334","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676478","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676496","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676529","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676536","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676615","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676644","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676655","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676786","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676833","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676845","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676879","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676889","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677080","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677131","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677390","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677527","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677567","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677836","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678167","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678233","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678289","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683332","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037727","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037729","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037730","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037731","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037732","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037761","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037870","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095740","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095737","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.blackberry.com/btsc/KB36051","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.f-secure.com/en/web/labs_global/fsc-2014-6","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/FG-IR-14-018/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg3T1020948","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ibm.com/support/docview.wss?uid=ssg1S1004678","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg1IT02314","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676356","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676793","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676877","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg24037783","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/978508","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kerio.com/support/kerio-control/release-history","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:105","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:106","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7015264","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7015300","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20140605.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"secalert@redhat.com","tags":["Not Applicable","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031032","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031594","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAM2D","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.tenable.com/blog/nessus-527-and-pvs-403-are-available-for-download","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/site/blogs/766093/posts/908133","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103586","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://discussions.nessus.org/thread/7517","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://filezilla-project.org/versions.php?type=server","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=bc8923b1ec9c467755cd86f7848c50ee8812e441","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA80","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10075","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/941-security-advisory-0005","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.ibm.com/support/docview.wss?uid=ssg1S1004670","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.ibm.com/support/docview.wss?uid=ssg1S1004671","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.imperialviolet.org/2014/06/05/earlyccs.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_SNARE_for_MSSQL.pdf","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_Snare_for_Windows.pdf","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.novell.com/support/kb/doc.php?id=7015271","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://ccsinjection.lepidum.co.jp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://dev.mysql.com/doc/relnotes/workbench/en/wb-news-6-1-7.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://esupport.trendmicro.com/solution/en-US/1103813.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://linux.oracle.com/errata/ELSA-2014-1053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140266410314613&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140317760000786&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140369637402535&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140386311427810&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140431828824371&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140482916501310&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140491231331543&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140499864129699&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140544599631400&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140604261522465&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140672208601650&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140784085708882&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140794476212181&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140852757108392&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140852826008699&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140870499402361&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140983229106599&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141025641601169&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141147110427269&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141164638606214&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141383410222440&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141383465822787&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141658880509699&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142350350616251&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142546741516006&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142805027510172&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://puppetlabs.com/security/cve/cve-2014-0224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0624.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0627.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0630.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0631.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0632.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0633.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0680.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Jun/38","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/58128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/58977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201407-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT6443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15325.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV61506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.blackberry.com/btsc/KB36051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.f-secure.com/en/web/labs_global/fsc-2014-6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/FG-IR-14-018/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg3T1020948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ibm.com/support/docview.wss?uid=ssg1S1004678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg1IT02314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg24037783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/978508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kerio.com/support/kerio-control/release-history","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7015264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7015300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20140605.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAM2D","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.tenable.com/blog/nessus-527-and-pvs-403-are-available-for-download","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/site/blogs/766093/posts/908133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://discussions.nessus.org/thread/7517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://filezilla-project.org/versions.php?type=server","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=bc8923b1ec9c467755cd86f7848c50ee8812e441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA80","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/941-security-advisory-0005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.ibm.com/support/docview.wss?uid=ssg1S1004670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.ibm.com/support/docview.wss?uid=ssg1S1004671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.imperialviolet.org/2014/06/05/earlyccs.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_SNARE_for_MSSQL.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_Snare_for_Windows.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.novell.com/support/kb/doc.php?id=7015271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-3470","sourceIdentifier":"secalert@redhat.com","published":"2014-06-05T21:55:07.880","lastModified":"2026-06-17T00:08:14.657","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value."},{"lang":"es","value":"La función ssl3_send_client_key_exchange en s3_clnt.c en OpenSSL anterior a 0.9.8za, 1.0.0 anterior a 1.0.0m y 1.0.1 anterior a 1.0.1h, cuando un suite de cifrado ECDH anónimo está utilizado, permite a atacantes remotos causar una denegación de servicio (referencia a puntero nulo y caída de cliente) mediante la provocación de un valor de certificado nulo."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.8za","matchCriteriaId":"8FA55B3F-13D6-4DB6-A215-544A4CB44144"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.0m","matchCriteriaId":"126D6450-A9AC-4646-879E-3F53482AADD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.1","versionEndExcluding":"1.0.1h","matchCriteriaId":"0B107973-BC4B-450F-A083-7C89DE05328B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:storage:2.1:*:*:*:*:*:*:*","matchCriteriaId":"53C986BD-2D1F-4865-B16D-72FD875E3776"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*","matchCriteriaId":"20294CE7-12C8-43CA-A702-5ED2A3044FFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*","matchCriteriaId":"AA9B3CC0-DF1C-4A86-B2A3-A9D428A5A6E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.13","matchCriteriaId":"504AA794-4421-422D-A1C7-BB5AE334FD55"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*","matchCriteriaId":"5991814D-CA77-4C25-90D2-DB542B17E0AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*","matchCriteriaId":"D2DF4815-B8CB-4AD3-B91D-2E09A8E318E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*","matchCriteriaId":"15FC9014-BD85-4382-9D04-C0703E901D7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*","matchCriteriaId":"1831D45A-EE6E-4220-8F8C-248B69520948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:*:*:*:*:*:*:*","matchCriteriaId":"9DFA18B6-2642-470A-A350-68947529EE5D"}]}]}],"references":[{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195","source":"secalert@redhat.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140266410314613&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140317760000786&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140431828824371&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140482916501310&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140491231331543&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140499827729550&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/58337","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58579","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58615","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58667","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58713","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58714","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58716","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58742","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58797","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58939","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58945","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58977","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59120","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59126","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59162","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59167","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59175","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59189","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59191","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59192","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59223","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59264","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59282","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59284","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59287","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59300","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59301","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59306","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59310","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59340","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59342","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59362","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59364","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59365","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59413","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59431","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59437","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59438","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59440","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59441","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59442","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59445","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59449","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59450","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59451","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59459","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59460","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59483","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59490","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59491","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59495","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59514","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59518","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59525","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59655","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59659","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59666","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59669","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59721","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59784","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59895","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59916","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59990","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/60571","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/61254","source":"secalert@redhat.com","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-201407-05.xml","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT6443","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140876","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15342.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675626","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675821","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676071","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676496","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676501","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676529","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676615","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676655","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676879","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676889","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677527","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677836","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678167","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678289","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683332","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037761","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.blackberry.com/btsc/KB36051","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.f-secure.com/en/web/labs_global/fsc-2014-6","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676356","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676793","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg24037783","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:105","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:106","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7015264","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7015300","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20140605.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/67898","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAM2D","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0006.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103600","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=8011cd56e39a433b1837465259a9bd24a38727fb","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA80","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10075","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://www.novell.com/support/kb/doc.php?id=7015271","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140266410314613&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140317760000786&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140431828824371&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140482916501310&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140491231331543&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140499827729550&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/58337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/58977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/59990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/60571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/61254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://security.gentoo.org/glsa/glsa-201407-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT6443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX140876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15342.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg400001843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg24037761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.blackberry.com/btsc/KB36051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.f-secure.com/en/web/labs_global/fsc-2014-6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21676793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg24037783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7015264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/support/kb/doc.php?id=7015300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openssl.org/news/secadv_20140605.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/67898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAM2D","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=8011cd56e39a433b1837465259a9bd24a38727fb","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.bluecoat.com/index?page=content&id=SA80","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.novell.com/support/kb/doc.php?id=7015271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-3505","sourceIdentifier":"secalert@redhat.com","published":"2014-08-13T23:55:07.343","lastModified":"2026-06-17T00:08:19.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (application crash) via crafted DTLS packets that trigger an error condition."},{"lang":"es","value":"Vulnerabilidad de doble liberación en d1_both.c en la implementación DTLS en OpenSSL 0.9.8 anterior a 0.9.8zb, 1.0.0 anterior a 1.0.0n, y 1.0.1 anterior a 1.0.1i permite a atacantes remotos causar una denegación de servicio (caída de aplicación) a través de paquetes DTLS manipulados que provocan una condición de error."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","matchCriteriaId":"6AEBE689-3952-46F0-BACA-BB03041C6D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*","matchCriteriaId":"499E52F3-4B34-4C47-8ABF-292928EBAA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*","matchCriteriaId":"D530BE19-ADCF-4B5C-99E0-2B9A1DE7717F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*","matchCriteriaId":"A7540155-3629-4C76-9C67-8A8E0C1067F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*","matchCriteriaId":"419BBCCD-6F8A-418A-BA02-56267B11D948"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*","matchCriteriaId":"8A3A2AF8-C7DD-43D0-B03F-37E7EB735C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8y:*:*:*:*:*:*:*","matchCriteriaId":"DC142ACF-3CBD-4F96-B2AA-C7D48E7CF31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8za:*:*:*:*:*:*:*","matchCriteriaId":"EB130295-F27C-45DD-80F6-BE4BB0931C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"secalert@redhat.com"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","source":"secalert@redhat.com"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1053.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140853041709441&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141077370928502&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1256.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1297.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/58962","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59221","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59700","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59710","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59743","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59756","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60022","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60221","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60493","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60684","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60687","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60778","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60803","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60824","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60917","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60921","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60938","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61040","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61100","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61184","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61250","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61775","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61959","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"secalert@redhat.com"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15573.html","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"secalert@redhat.com"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:158","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/69081","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1030693","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=bff1ce4e6a1c57c3d0a5f9e4f85ba6385fccfe8b","source":"secalert@redhat.com"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140853041709441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=141077370928502&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1297.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/58962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15573.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=bff1ce4e6a1c57c3d0a5f9e4f85ba6385fccfe8b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/415.html\" target=\"_blank\">CWE-415: Double Free</a>"}},{"cve":{"id":"CVE-2014-3506","sourceIdentifier":"secalert@redhat.com","published":"2014-08-13T23:55:07.403","lastModified":"2026-06-17T00:08:19.697","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via crafted DTLS handshake messages that trigger memory allocations corresponding to large length values."},{"lang":"es","value":"d1_both.c en la implementación DTLS en OpenSSL 0.9.8 anterior a 0.9.8zb, 1.0.0 anterior a 1.0.0n, y 1.0.1 anterior a 1.0.1i permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de mensajes de negociación DTLS manipulados que provocan reservas de memoria correspondientes con valores de longitud grandes."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","matchCriteriaId":"6AEBE689-3952-46F0-BACA-BB03041C6D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*","matchCriteriaId":"499E52F3-4B34-4C47-8ABF-292928EBAA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*","matchCriteriaId":"D530BE19-ADCF-4B5C-99E0-2B9A1DE7717F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*","matchCriteriaId":"A7540155-3629-4C76-9C67-8A8E0C1067F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*","matchCriteriaId":"419BBCCD-6F8A-418A-BA02-56267B11D948"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*","matchCriteriaId":"8A3A2AF8-C7DD-43D0-B03F-37E7EB735C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8y:*:*:*:*:*:*:*","matchCriteriaId":"DC142ACF-3CBD-4F96-B2AA-C7D48E7CF31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8za:*:*:*:*:*:*:*","matchCriteriaId":"EB130295-F27C-45DD-80F6-BE4BB0931C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"secalert@redhat.com"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","source":"secalert@redhat.com"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1053.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140853041709441&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141077370928502&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1256.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1297.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/58962","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59221","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59700","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59710","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59743","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59756","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60022","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60221","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60493","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60684","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60687","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60778","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60803","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60824","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60917","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60921","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60938","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61017","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61040","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61100","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61184","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61250","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61775","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61959","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"secalert@redhat.com"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15573.html","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"secalert@redhat.com"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:158","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/69076","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1030693","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127500","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95160","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=1250f12613b61758675848f6600ebd914ccd7636","source":"secalert@redhat.com"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140853041709441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=141077370928502&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1297.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/58962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15573.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=1250f12613b61758675848f6600ebd914ccd7636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-3507","sourceIdentifier":"secalert@redhat.com","published":"2014-08-13T23:55:07.450","lastModified":"2026-06-17T00:08:20.003","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via zero-length DTLS fragments that trigger improper handling of the return value of a certain insert function."},{"lang":"es","value":"Fuga de memoria en d1_both.c en la implementación DTLS en OpenSSL 0.9.8 anterior a 0.9.8zb, 1.0.0 anterior a 1.0.0n, y 1.0.1 anterior a 1.0.1i permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de fragmentos DTLS de longitud cero que provocan el manejo indebido del valor de retorno de cierta función de insertar."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","matchCriteriaId":"6AEBE689-3952-46F0-BACA-BB03041C6D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*","matchCriteriaId":"499E52F3-4B34-4C47-8ABF-292928EBAA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*","matchCriteriaId":"D530BE19-ADCF-4B5C-99E0-2B9A1DE7717F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*","matchCriteriaId":"A7540155-3629-4C76-9C67-8A8E0C1067F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*","matchCriteriaId":"419BBCCD-6F8A-418A-BA02-56267B11D948"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*","matchCriteriaId":"8A3A2AF8-C7DD-43D0-B03F-37E7EB735C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8y:*:*:*:*:*:*:*","matchCriteriaId":"DC142ACF-3CBD-4F96-B2AA-C7D48E7CF31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8za:*:*:*:*:*:*:*","matchCriteriaId":"EB130295-F27C-45DD-80F6-BE4BB0931C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"secalert@redhat.com"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140853041709441&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141077370928502&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/58962","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59700","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59710","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59743","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59756","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60022","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60221","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60493","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60684","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60778","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60803","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60824","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60917","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60921","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60938","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61017","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61040","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61100","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61184","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61250","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61775","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61959","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"secalert@redhat.com"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15573.html","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"secalert@redhat.com"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:158","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/69078","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1030693","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127502","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95161","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=d0a4b7d1a2948fce38515b8d862f43e7ba0ebf74","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10109","source":"secalert@redhat.com"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140853041709441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=141077370928502&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/58962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15573.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=d0a4b7d1a2948fce38515b8d862f43e7ba0ebf74","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-3508","sourceIdentifier":"secalert@redhat.com","published":"2014-08-13T23:55:07.497","lastModified":"2026-06-17T00:08:20.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of '\\0' characters, which allows context-dependent attackers to obtain sensitive information from process stack memory by reading output from X509_name_oneline, X509_name_print_ex, and unspecified other functions."},{"lang":"es","value":"La función OBJ_obj2txt en crypto/objects/obj_dat.c en OpenSSL 0.9.8 anterior a 0.9.8zb, 1.0.0 anterior a 1.0.0n, y 1.0.1 anterior a 1.0.1i, cuando 'pretty printing' está utilizado, no asegura la presencia de caracteres '\\0', lo que permite a atacantes dependientes de contexto obtener información sensible de la memoria en pila del proceso mediante la lectura de salidas de X509_name_oneline, X509_name_print_ex, y otras funciones no especificadas."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","matchCriteriaId":"6AEBE689-3952-46F0-BACA-BB03041C6D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*","matchCriteriaId":"499E52F3-4B34-4C47-8ABF-292928EBAA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*","matchCriteriaId":"D530BE19-ADCF-4B5C-99E0-2B9A1DE7717F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*","matchCriteriaId":"A7540155-3629-4C76-9C67-8A8E0C1067F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*","matchCriteriaId":"419BBCCD-6F8A-418A-BA02-56267B11D948"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*","matchCriteriaId":"8A3A2AF8-C7DD-43D0-B03F-37E7EB735C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8y:*:*:*:*:*:*:*","matchCriteriaId":"DC142ACF-3CBD-4F96-B2AA-C7D48E7CF31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8za:*:*:*:*:*:*:*","matchCriteriaId":"EB130295-F27C-45DD-80F6-BE4BB0931C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"secalert@redhat.com"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","source":"secalert@redhat.com"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1053.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140853041709441&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140973896703549&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141077370928502&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1256.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1297.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/58962","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59221","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59700","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59710","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59743","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59756","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60022","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60221","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60410","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60493","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60684","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60687","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60778","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60803","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60824","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60861","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60917","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60921","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60938","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61017","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61100","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61171","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61184","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61214","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61250","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61392","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61775","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61959","source":"secalert@redhat.com"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15571.html","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21681752","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"secalert@redhat.com"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:158","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/69075","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1030693","source":"secalert@redhat.com"},{"url":"http://www.tenable.com/security/tns-2014-06","source":"secalert@redhat.com"},{"url":"https://blogs.oracle.com/sunsecurity/entry/cve_2014_3508_information_disclosure","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127490","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95165","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=0042fb5fd1c9d257d713b15a1f45da05cf5c1c87","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140853041709441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140973896703549&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=141077370928502&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1297.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/58962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15571.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21681752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tenable.com/security/tns-2014-06","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blogs.oracle.com/sunsecurity/entry/cve_2014_3508_information_disclosure","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=0042fb5fd1c9d257d713b15a1f45da05cf5c1c87","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-3509","sourceIdentifier":"secalert@redhat.com","published":"2014-08-13T23:55:07.547","lastModified":"2026-06-17T00:08:20.670","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multithreading and session resumption are used, allows remote SSL servers to cause a denial of service (memory overwrite and client application crash) or possibly have unspecified other impact by sending Elliptic Curve (EC) Supported Point Formats Extension data."},{"lang":"es","value":"Condición de carrera en la función ssl_parse_serverhello_tlsext en t1_lib.c en OpenSSL 1.0.0 anterior a 1.0.0n y 1.0.1 anterior a 1.0.1i, cuando multihilos y la redención de la sesión están utilizados, permite a servidores SSL remotos causar una denegación de servicio (sobrescritura de memoria y caída de la aplicación del cliente) o posiblemente tener otro impacto no especificado mediante el envió de datos Elliptic Curve (EC) Supported Point Formats Extension."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"secalert@redhat.com"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142350350616251&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0197.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/58962","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59700","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59710","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59756","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60022","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60221","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60493","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60684","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60803","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60917","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60921","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60938","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61017","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61100","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61139","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61184","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61775","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61959","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"secalert@redhat.com"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:158","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/69084","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1030693","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127498","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95159","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=fb0bc2b273bcc2d5401dd883fe869af4fc74bb21","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://techzone.ergon.ch/CVE-2014-3511","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142350350616251&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0197.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/58962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=fb0bc2b273bcc2d5401dd883fe869af4fc74bb21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://techzone.ergon.ch/CVE-2014-3511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-3510","sourceIdentifier":"secalert@redhat.com","published":"2014-08-13T23:55:07.577","lastModified":"2026-06-17T00:08:20.967","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service (NULL pointer dereference and client application crash) via a crafted handshake message in conjunction with a (1) anonymous DH or (2) anonymous ECDH ciphersuite."},{"lang":"es","value":"La función ssl3_send_client_key_exchange en s3_clnt.c en OpenSSL 0.9.8 anterior a 0.9.8zb, 1.0.0 anterior a 1.0.0n, y 1.0.1 anterior a 1.0.1i permite a servidores DTLS remotos causar una denegación de servicio (referencia a puntero nulo y caída de la aplicación del cliente) a través de un mensaje de negociación manipulado en conjunto con un suite de cifrado (1) anónimo DH o (2) anónimo ECDH."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","matchCriteriaId":"6AEBE689-3952-46F0-BACA-BB03041C6D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*","matchCriteriaId":"499E52F3-4B34-4C47-8ABF-292928EBAA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*","matchCriteriaId":"D530BE19-ADCF-4B5C-99E0-2B9A1DE7717F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*","matchCriteriaId":"A7540155-3629-4C76-9C67-8A8E0C1067F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*","matchCriteriaId":"419BBCCD-6F8A-418A-BA02-56267B11D948"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*","matchCriteriaId":"8A3A2AF8-C7DD-43D0-B03F-37E7EB735C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8y:*:*:*:*:*:*:*","matchCriteriaId":"DC142ACF-3CBD-4F96-B2AA-C7D48E7CF31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8za:*:*:*:*:*:*:*","matchCriteriaId":"EB130295-F27C-45DD-80F6-BE4BB0931C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"secalert@redhat.com"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","source":"secalert@redhat.com"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1053.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=140853041709441&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141077370928502&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1256.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1297.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/58962","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59221","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59700","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59710","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59743","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59756","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60022","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60221","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60493","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60684","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60687","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60778","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60803","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60824","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60917","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60921","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60938","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61017","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61045","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61100","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61184","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61250","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61775","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61959","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"secalert@redhat.com"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15568.html","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"secalert@redhat.com"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:158","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/69082","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1030693","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127503","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95164","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=17160033765480453be0a41335fa6b833691c049","source":"secalert@redhat.com"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=140853041709441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=141077370928502&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1297.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/58962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15568.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=17160033765480453be0a41335fa6b833691c049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\" target=\"_blank\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2014-3511","sourceIdentifier":"secalert@redhat.com","published":"2014-08-13T23:55:07.623","lastModified":"2026-06-17T00:08:21.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a \"protocol downgrade\" issue."},{"lang":"es","value":"La función ssl23_get_client_hello en s23_srvr.c en OpenSSL 1.0.1 anterior a 1.0.1i permite a atacantes man-in-the-middle forzar el uso de TLS 1.0 mediante la provocación de la fragmentación de mensajes ClientHello comunicaciones entre un cliente y el servidor que ambos soportan versiones TLS posteriores, relacionado con un problema de 'degradación de protocolo'."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"secalert@redhat.com"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142350350616251&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0126.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0197.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/58962","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59700","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59710","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59756","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59887","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60022","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60221","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60493","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60684","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60803","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60810","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60890","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60917","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60921","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60938","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61017","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61043","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61100","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61139","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61184","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61775","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61959","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"secalert@redhat.com"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15564.html","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"secalert@redhat.com"},{"url":"http://www.arubanetworks.com/support/alerts/aid-08182014.txt","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"secalert@redhat.com"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/69079","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1030693","source":"secalert@redhat.com"},{"url":"http://www.splunk.com/view/SP-CAAANHS","source":"secalert@redhat.com"},{"url":"http://www.tenable.com/security/tns-2014-06","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127504","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95162","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=280b1f1ad12131defcd986676a8fc9717aaa601b","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10084","source":"secalert@redhat.com"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://techzone.ergon.ch/CVE-2014-3511","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142350350616251&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0197.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/58962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15564.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.arubanetworks.com/support/alerts/aid-08182014.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.splunk.com/view/SP-CAAANHS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tenable.com/security/tns-2014-06","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=280b1f1ad12131defcd986676a8fc9717aaa601b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://techzone.ergon.ch/CVE-2014-3511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-3512","sourceIdentifier":"secalert@redhat.com","published":"2014-08-13T23:55:07.670","lastModified":"2026-06-17T00:08:21.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter."},{"lang":"es","value":"Múltiples desbordamientos de buffer en crypto/srp/srp_lib.c en la implementación SRP en OpenSSL 1.0.1 anterior a 1.0.1i permiten a atacantes remotos causar una denegación de servicio (caída de aplicación) o posiblemente tener otro impacto no especificado a través de un parámetro SRP (1) g, (2) A, o (3) B inválido."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59700","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59710","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59756","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60022","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60221","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60493","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60803","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60810","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60917","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/60921","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61017","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61100","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61171","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61184","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61775","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61959","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"secalert@redhat.com"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15565.html","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"secalert@redhat.com"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/69083","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1030693","source":"secalert@redhat.com"},{"url":"http://www.tenable.com/security/tns-2014-06","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95158","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=4a23b12a031860253b58d503f296377ca076427b","source":"secalert@redhat.com"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15565.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tenable.com/security/tns-2014-06","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=4a23b12a031860253b58d503f296377ca076427b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-5139","sourceIdentifier":"cret@cert.org","published":"2014-08-13T23:55:07.717","lastModified":"2026-06-17T00:11:06.840","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service (NULL pointer dereference and client application crash) via a ServerHello message that includes an SRP ciphersuite without the required negotiation of that ciphersuite with the client."},{"lang":"es","value":"La función ssl_set_client_disabled en t1_lib.c en OpenSSL 1.0.1 anterior a 1.0.1i permite a servidores SSL remotos causar una denegación de servicio (referencia a puntero nulo y caída de la aplicación del cliente) a través de un mensaje ServerHello que incluye un suite de cifrado SRP sin la negociación necesaria de este suite de cifrada con el cliente."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"cret@cert.org"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=142350350616251&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=142624619906067","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=142624619906067&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=142624679706236&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=142624719706349&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/59700","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/59710","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/59756","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/60022","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/60221","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/60493","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/60803","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/60810","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/60917","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/60921","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/61017","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/61100","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/61171","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/61184","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/61392","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/61775","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/61959","source":"cret@cert.org"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"cret@cert.org"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15567.html","source":"cret@cert.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"cret@cert.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"cret@cert.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"cret@cert.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"cret@cert.org"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"cret@cert.org"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/69077","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id/1030693","source":"cret@cert.org"},{"url":"http://www.tenable.com/security/tns-2014-06","source":"cret@cert.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=80bd7b41b30af6ee96f519e629463583318de3b0","source":"cret@cert.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=83764a989dcc87fbea337da5f8f86806fe767b7e","source":"cret@cert.org"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"cret@cert.org"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"cret@cert.org"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142350350616251&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142624619906067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142624619906067&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142624679706236&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142624719706349&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-2998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tenable.com/security/tns-2014-06","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=80bd7b41b30af6ee96f519e629463583318de3b0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=83764a989dcc87fbea337da5f8f86806fe767b7e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20140806.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\" target=\"_blank\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2014-3566","sourceIdentifier":"secalert@redhat.com","published":"2014-10-15T00:55:02.137","lastModified":"2026-06-17T00:08:29.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \"POODLE\" issue."},{"lang":"es","value":"El protocolo SSL 3.0, utilizado en OpenSSL hasta 1.0.1i y otros productos, utiliza relleno (padding) CBC no determinístico, lo que facilita a los atacantes man-in-the-middle obtener datos de texto plano a través de un ataque de relleno (padding) oracle, también conocido como el problema \"POODLE\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","baseScore":3.4,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","baseScore":3.4,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-28T17:34:07.818657Z","id":"CVE-2014-3566","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-329"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*","matchCriteriaId":"AA9B3CC0-DF1C-4A86-B2A3-A9D428A5A6E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CC2EDDE6-49F2-41D3-BCB2-F49886A2A170"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B8C6E104-EDBC-481E-85B8-D39ED2058D39"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_supplementary:5.0:*:*:*:*:*:*:*","matchCriteriaId":"FB3FB071-FCCC-4425-AFBF-77287C1B8F7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*","matchCriteriaId":"4B74C62D-4A6D-4A4F-ADF6-A508322CD447"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_supplementary:7.0:*:*:*:*:*:*:*","matchCriteriaId":"5DCADB10-49F8-4E8A-B915-6A770620B212"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*","matchCriteriaId":"6E89B38A-3697-46DD-BB3F-E8D2373588BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:7.0:*:*:*:*:*:*:*","matchCriteriaId":"56998F82-855E-4514-A4AF-A36084E10C5A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"FD518B94-9CD7-4C45-8766-578CF427B4CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0402E20C-8B41-4A2A-BFF9-92EC843985F0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.10.1","matchCriteriaId":"24C6A01A-6308-4C69-B4D5-5BC10277E2E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mageia:mageia:3.0:*:*:*:*:*:*:*","matchCriteriaId":"76F1E356-E019-47E8-AA5F-702DA93CF74E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mageia:mageia:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F805A106-9A6F-48E7-8582-D3C5A26DFC11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F3A90FEC-BCBF-4803-AC2E-55002987BE8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:10.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6E21D6-B64A-44D2-937D-CB7EDCB996C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:*:*:*:*:*:*:*","matchCriteriaId":"8973AFDD-DB77-4AA2-A17C-9BBEE4439E25"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*","matchCriteriaId":"EA04C9F1-6257-4D82-BA0B-37DE66D94736"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp3:*:*:*:*:*:*","matchCriteriaId":"2A1D7F64-5AE6-4F2D-A282-DFF61399DFBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*","matchCriteriaId":"336EC5B8-6FD8-42BB-9530-58A15238CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:*:*:*:*","matchCriteriaId":"623DB4CD-8CB3-445A-B9B5-1238CF195235"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:*:vmware:*:*","matchCriteriaId":"83439D9C-2374-473C-8D64-C0DB886FEFB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"C384D0B6-8A5C-45CA-8CD9-7F4E967FE4F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*","matchCriteriaId":"DFBF430B-0832-44B0-AA0E-BA9E467F7668"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*","matchCriteriaId":"5991814D-CA77-4C25-90D2-DB542B17E0AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","matchCriteriaId":"6AEBE689-3952-46F0-BACA-BB03041C6D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*","matchCriteriaId":"499E52F3-4B34-4C47-8ABF-292928EBAA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*","matchCriteriaId":"D530BE19-ADCF-4B5C-99E0-2B9A1DE7717F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*","matchCriteriaId":"A7540155-3629-4C76-9C67-8A8E0C1067F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*","matchCriteriaId":"419BBCCD-6F8A-418A-BA02-56267B11D948"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*","matchCriteriaId":"8A3A2AF8-C7DD-43D0-B03F-37E7EB735C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8y:*:*:*:*:*:*:*","matchCriteriaId":"DC142ACF-3CBD-4F96-B2AA-C7D48E7CF31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8z:*:*:*:*:*:*:*","matchCriteriaId":"A6B4D332-3CB7-4C57-A689-ED0894659ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8za:*:*:*:*:*:*:*","matchCriteriaId":"EB130295-F27C-45DD-80F6-BE4BB0931C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8zb:*:*:*:*:*:*:*","matchCriteriaId":"CFA6F5C9-9EE6-40FA-AA99-B4C7274BE8EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"C17C77E3-ABCE-4F1F-A55D-DB61A2A5E28F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"89B876D5-7095-4BA2-9EE3-3F0632BC2E77"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"918D00A4-5502-4DD6-A079-807AB3E964B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A38E8EAD-0742-41CB-B69E-DCC483CBC485"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D1E3BE5C-5097-4585-AF0D-79661DC4A231"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"953723A1-606F-4976-A843-1A3F020B9B53"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3F70EC32-7365-4653-8843-84C92EE9EC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"AFABBD01-0773-4823-ABBA-95181558C88E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"CE68D967-3356-4CF1-A582-F4EEAC52FA1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"75F11AA6-E01D-4951-BB2C-31BB181DF895"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F2D6AF76-02D2-42C1-9620-8F73D5547CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"C762024B-5792-43A3-A82F-A1C0F152F7BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"20C26A6C-3C2E-4A2B-B201-6EE949368EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"0CB6DD83-F8B5-4286-879C-EDD35F5C7FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9F110827-BCB4-468D-B8F7-4B545F965BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"43E177AD-166A-4521-89BE-66E7571EB80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3FAE0988-3222-4B11-A809-DFEE0FFDD98F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"683595A9-7C48-455D-91E7-BF7E1F5B4BF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C0AFDC7F-23C2-4925-9356-944CBEBB1E7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"DE446DB7-3B45-461A-A8E7-5DAFAD8AE5D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"32B39B8F-50BF-460E-BD26-5C38E125362F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FA02D40A-7BC3-42C4-8CEF-C992A3EECE4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"35AB63E6-D66C-4F69-8C76-5BB56B0D6A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:vios:2.2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D3F16ABD-287C-4710-9720-570648A13F97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"730917F8-E1F4-4836-B05A-16B2BA5774DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"38D69127-E5B0-4BC6-8E0A-A5F16D19B06B"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C76E9006-A1DA-4902-94C9-AE7071E5A6BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D861332D-5976-4544-91C6-4016BAC4648E"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E8D29E76-7A2D-4BC5-AF4E-99A9C31A14D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"3407906D-EF23-4812-A597-F0E863DE17B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F0D17EDB-45BF-4922-8D46-8C340D3F8D1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"269E87C2-7474-43F0-870E-C5ADCB73ABFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C23BD3A0-E5AD-4893-AAAF-E2858B4128CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:6.0:beta:*:*:*:*:*:*","matchCriteriaId":"164CD64D-C160-4F75-BF04-19BC7F6E11BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1510AD8C-14AC-4649-AE37-5310575B3E3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"44D36CD7-FE10-4A72-8364-DE3EFD49AB4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"24469F6E-FC82-416A-9639-8FC37BE9745F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A4E28965-1C24-43CC-AFAA-5716D8F6CC6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"368CB806-F671-481F-A9BE-DC320F82E5B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EF7E45F6-2EE9-4E97-B502-F48F2DDC5F3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:6.1:*:*:*:*:*:*:*","matchCriteriaId":"69CAE756-335E-4E02-83F9-B274D416775C"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D3784838-1A43-4C46-A730-4CB88594A449"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F555CE26-6E23-4E7A-A138-6F675EA9BEAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"69071B74-471C-42C0-AF2D-2D278D355250"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:6.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1C501514-768D-4AC0-8797-152763F24F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"79D2486C-5C39-40C7-B87B-969800F730C5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database:11.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5100F5C8-D5F8-466B-AABE-E42B3770B39D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F3C58EE-B36B-4081-A307-0FE9B52D8E62"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://advisories.mageia.org/MGASA-2014-0416.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://downloads.asterisk.org/pub/security/AST-2014-011.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142330.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141114.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141450452204552&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141450973807288&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141477196830952&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141576815022399&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141577087123040&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141577350823734&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141620103726640&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141628688425177&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141694355519663&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141697638231025&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141697676231104&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141703183219781&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141715130023061&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141775427104070&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141813976718456&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141814011518700&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141879378918327&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142103967620673&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142296755107581&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142350196615714&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142350298616097&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142350743917559&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142354438527235&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142357976805598&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142496355704097&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142546741516006&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142607790919348&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142624619906067","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142624619906067&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142624679706236&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142624719706349&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142721830231196&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142721887231400&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142740155824959&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142804214608580&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142805027510172&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142962817202793&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143039249603103&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143101048219218&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143290371927178&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143290583027876&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143558137709884&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143558192010071&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143628269912142&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144101915224472&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144251162130364&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144294141001552&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145983526810210&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=openssl-dev&m=141333049205629&w=2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3566.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1652.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1653.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1692.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1876.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1877.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1880.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1881.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1882.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1920.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1948.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0068.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0079.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0080.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0085.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0086.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0264.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0698.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1545.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1546.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59627","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60056","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60206","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60792","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60859","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61019","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61130","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61303","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61316","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61345","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61359","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61782","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61810","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61819","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61825","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61827","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61926","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61995","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/HT204244","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX200238","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021431","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021439","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21687172","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21687611","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21688283","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21692299","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-3053","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3144","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3147","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3253","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3489","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/577193","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:203","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/533724/100/0/threaded","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/533746","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/533747","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/70574","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031029","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031039","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031085","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031086","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031087","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031088","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031089","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031090","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031091","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031092","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031093","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031094","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031095","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031096","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031105","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031106","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031107","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031120","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031123","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031124","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031130","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031131","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031132","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2486-1","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2487-1","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA14-290A","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2015-0003.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-405500.htm","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/articles/1232123","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa83","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1076983","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1152789","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://devcentral.f5.com/articles/cve-2014-3566-removing-sslv3-from-big-ip","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://github.com/mpgn/poodle-PoC","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://groups.google.com/forum/#%21topic/docker-user/oYm0i3xShJU","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10090","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10091","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10104","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E","source":"secalert@redhat.com"},{"url":"https://puppet.com/security/cve/poodle-sslv3-vulnerability","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201507-14","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201606-11","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20141015-0001/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT205217","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT6527","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT6529","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT6531","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT6535","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT6536","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT6541","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT6542","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.lenovo.com/product_security/poodle","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.lenovo.com/us/en/product_security/poodle","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://technet.microsoft.com/library/security/3009008.aspx","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21688165","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1015-security-advisory-7","source":"secalert@redhat.com"},{"url":"https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.dfranke.us/posts/2014-10-14-how-poodle-happened.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.elastic.co/blog/logstash-1-4-3-released","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.imperialviolet.org/2014/10/14/poodle.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv_20141015.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.openssl.org/~bodo/ssl-poodle.pdf","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.suse.com/support/kb/doc.php?id=7015773","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://advisories.mageia.org/MGASA-2014-0416.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://downloads.asterisk.org/pub/security/AST-2014-011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142330.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141114.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141450452204552&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141450973807288&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141477196830952&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141576815022399&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141577087123040&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141577350823734&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141620103726640&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141628688425177&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141694355519663&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141697638231025&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141697676231104&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141703183219781&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141715130023061&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141775427104070&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141813976718456&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141814011518700&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=141879378918327&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142103967620673&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142296755107581&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142350196615714&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142350298616097&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142350743917559&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142354438527235&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142357976805598&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142496355704097&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142546741516006&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142607790919348&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142624619906067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142624619906067&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142624679706236&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142624719706349&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142660345230545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142721830231196&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142721887231400&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142740155824959&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142804214608580&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142805027510172&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=142962817202793&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143039249603103&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143101048219218&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143290371927178&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143290583027876&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143558137709884&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143558192010071&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143628269912142&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144101915224472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144251162130364&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144294141001552&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145983526810210&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=openssl-dev&m=141333049205629&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3566.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1652.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1653.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1692.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1876.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1877.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1880.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1881.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1882.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1920.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1948.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0068.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0079.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0080.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0086.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0264.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0698.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/59627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/60859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/61995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/HT204244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX200238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=isg3T1021439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21687172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21687611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21688283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21692299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2014/dsa-3053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/577193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/533724/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/533746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/533747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/70574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2486-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2487-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA14-290A","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2015-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-405500.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/articles/1232123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa83","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1076983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1152789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://devcentral.f5.com/articles/cve-2014-3566-removing-sslv3-from-big-ip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/mpgn/poodle-PoC","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://groups.google.com/forum/#%21topic/docker-user/oYm0i3xShJU","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://puppet.com/security/cve/poodle-sslv3-vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201507-14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201606-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20141015-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT205217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT6527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT6529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT6531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT6535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT6536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT6541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT6542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.lenovo.com/product_security/poodle","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.lenovo.com/us/en/product_security/poodle","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://technet.microsoft.com/library/security/3009008.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://templatelab.com/ssl-poodle/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www-01.ibm.com/support/docview.wss?uid=swg21688165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1015-security-advisory-7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.dfranke.us/posts/2014-10-14-how-poodle-happened.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.elastic.co/blog/logstash-1-4-3-released","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.imperialviolet.org/2014/10/14/poodle.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv_20141015.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.openssl.org/~bodo/ssl-poodle.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.suse.com/support/kb/doc.php?id=7015773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2014-3513","sourceIdentifier":"secalert@redhat.com","published":"2014-10-19T01:55:13.887","lastModified":"2026-06-17T00:08:21.843","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message."},{"lang":"es","value":"Fuga de memoria en d1_srtp.c en la extensión DTLS SRTP en OpenSSL 1.0.1 anterior a 1.0.1j permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de un mensaje de negociación manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc","source":"secalert@redhat.com"},{"url":"http://advisories.mageia.org/MGASA-2014-0416.html","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142804214608580&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142834685803386&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143290583027876&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1652.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1692.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59627","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61058","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61073","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61207","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61298","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61439","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61837","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61959","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61990","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62070","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-3053","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/70584","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1031052","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2385-1","source":"secalert@redhat.com"},{"url":"https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=2b0532f3984324ebe1236a63d15893792384328d","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10091","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT205217","source":"secalert@redhat.com"},{"url":"https://support.f5.com/kb/en-us/solutions/public/15000/700/sol15722.html","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20141015.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://advisories.mageia.org/MGASA-2014-0416.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142804214608580&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142834685803386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290583027876&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1652.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1692.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/62070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-3053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/70584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1031052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2385-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=2b0532f3984324ebe1236a63d15893792384328d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/kb/en-us/solutions/public/15000/700/sol15722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20141015.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-3567","sourceIdentifier":"secalert@redhat.com","published":"2014-10-19T01:55:13.933","lastModified":"2026-06-17T00:08:30.667","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure."},{"lang":"es","value":"Fuga de memoria en la función tls_decrypt_ticket en t1_lib.c en OpenSSL anterior a 0.9.8zc, 1.0.0 anterior a 1.0.0o, y 1.0.1 anterior a 1.0.1j permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de un ticket de sesión manipulado que provoca un fallo en la comprobación de integridad."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8zb","matchCriteriaId":"7AA6173C-DA1F-4A3B-BB8A-E52F3B846134"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc","source":"secalert@redhat.com"},{"url":"http://advisories.mageia.org/MGASA-2014-0416.html","source":"secalert@redhat.com"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141477196830952&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142103967620673&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142804214608580&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142834685803386&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143290583027876&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1652.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1692.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0126.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59627","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61058","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61073","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61130","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61207","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61298","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61819","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61837","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61959","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61990","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62030","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62070","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62124","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/HT204244","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-3053","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:203","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/70586","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1031052","source":"secalert@redhat.com"},{"url":"http://www.splunk.com/view/SP-CAAANST","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2385-1","source":"secalert@redhat.com"},{"url":"https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=7fd4ce6a997be5f5c9e744ac527725c2850de203","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10091","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT205217","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20141015.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://advisories.mageia.org/MGASA-2014-0416.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=141477196830952&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142103967620673&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142118135300698&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142804214608580&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142834685803386&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290583027876&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1652.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1692.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/62030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/62070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/62124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/HT204244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-3053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2014:203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/70586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1031052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.splunk.com/view/SP-CAAANST","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2385-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=7fd4ce6a997be5f5c9e744ac527725c2850de203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20141015.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-3568","sourceIdentifier":"secalert@redhat.com","published":"2014-10-19T01:55:13.980","lastModified":"2026-06-17T00:08:30.983","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c."},{"lang":"es","value":"OpenSSL anterior a 0.9.8zc, 1.0.0 anterior a 1.0.0o, y 1.0.1 anterior a 1.0.1j no fuerza correctamente la opción build no-ssl3, lo que permite a atacantes remotos evadir las restricciones de acceso a través de una negociación SSL 3.0, relacionado con s23_clnt.c y s23_srvr.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8zb","matchCriteriaId":"7AA6173C-DA1F-4A3B-BB8A-E52F3B846134"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=141477196830952&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142103967620673&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142804214608580&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59627","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61058","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61073","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61130","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61207","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61819","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61959","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62030","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62070","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62124","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/HT204244","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-3053","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/70585","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1031053","source":"secalert@redhat.com"},{"url":"https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/97037","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=26a59d9b46574e457870197dffa802871b4c8fc7","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10091","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT205217","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20141015.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=141477196830952&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142103967620673&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142495837901899&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142624590206005&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142791032306609&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142804214608580&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290437727362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143290522027658&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/62030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/62070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/62124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/HT204244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-3053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/70585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1031053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/97037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=26a59d9b46574e457870197dffa802871b4c8fc7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20141015.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-3694","sourceIdentifier":"secalert@redhat.com","published":"2014-10-29T10:55:04.307","lastModified":"2026-06-17T00:08:46.107","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) bundled GnuTLS SSL/TLS plugin and the (2) bundled OpenSSL SSL/TLS plugin in libpurple in Pidgin before 2.10.10 do not properly consider the Basic Constraints extension during verification of X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate."},{"lang":"es","value":"(1) El plugin bundled GnuTLS SSL/TLS y (2) el plugin bundled OpenSSL SSL/TLS en libpurple en Pidgin anterior a 2.10.10 no consideran debidamente la extensión Basic Constraints durante la verificación de los certificados X.509 de los servidores SSL, lo que permite a atacantes man-in-the-middle suplantar servidores y obtener información sensible a través de un certificado manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*","matchCriteriaId":"DFBF430B-0832-44B0-AA0E-BA9E467F7668"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.10.9","matchCriteriaId":"6FA30C55-F54F-481A-BD32-778708E475C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"C1337152-04D4-4439-8F49-B6BCE271A3AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"A730DE04-9886-4920-A210-6C41CD77E330"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"E8A7F491-499A-4E1B-B5DB-FC1186DD6672"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"CAEE2341-00C0-48D7-867F-DF18D4BBEE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.10.4:*:*:*:*:*:*:*","matchCriteriaId":"450890EF-3950-4603-8402-BBD539D6CF4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.10.5:*:*:*:*:*:*:*","matchCriteriaId":"DF30FFB0-19E7-4385-A752-BEAD0A085CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.10.6:*:*:*:*:*:*:*","matchCriteriaId":"C00098D5-9696-499A-8048-31FD4021CB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.10.7:*:*:*:*:*:*:*","matchCriteriaId":"390887A5-9CC8-40B7-A7FD-E6D920BFCCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pidgin:pidgin:2.10.8:*:*:*:*:*:*:*","matchCriteriaId":"2C86FC11-74EB-4881-8C58-844B44A7BD7C"}]}]}],"references":[{"url":"http://hg.pidgin.im/pidgin/main/rev/2e4475087f04","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://pidgin.im/news/security/?id=86","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/60741","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/61968","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2014/dsa-3055","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2390-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1854","source":"secalert@redhat.com"},{"url":"http://hg.pidgin.im/pidgin/main/rev/2e4475087f04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://pidgin.im/news/security/?id=86","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/60741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/61968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-3055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2390-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1854","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-3569","sourceIdentifier":"secalert@redhat.com","published":"2014-12-24T11:59:00.057","lastModified":"2026-06-17T00:08:31.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling.  NOTE: this issue became relevant after the CVE-2014-3568 fix."},{"lang":"es","value":"La función ssl23_get_client_hello en s23_srvr.c en OpenSSL 0.9.8zc, 1.0.0o y 1.0.1j no maneja adecuadamente los intentos de utilizar protocolos no soportados, lo que permite a atacantes remotos causar una denegación de servicio (referencia a puntero NULL y caída de demonio) a través de un apretón de manos no esperado, según lo demostrado por un apretón de manos SSLv3 a una aplicación no-ssl3 con ciertos manejos de errores. NOTA: este problema se volvió relevante después de la corrección de CVE-2014-3568."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142496179803395&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142496289803847&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142895206924048&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com"},{"url":"http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3569.html","source":"secalert@redhat.com"},{"url":"http://rt.openssl.org/Ticket/Display.html?id=3571&user=guest&pass=guest","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/71934","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033378","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=392fa7a952e97d82eac6958c81ed1e256e6b8ca5","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=6ce9687b5aba5391fc0de50e18779eb676d0e04d","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=b82924741b4bd590da890619be671f4635e46c2b","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"secalert@redhat.com"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-3569","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT204659","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142496179803395&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142496289803847&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142895206924048&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rt.openssl.org/Ticket/Display.html?id=3571&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/71934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=392fa7a952e97d82eac6958c81ed1e256e6b8ca5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=6ce9687b5aba5391fc0de50e18779eb676d0e04d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=b82924741b4bd590da890619be671f4635e46c2b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-3569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT204659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2014-3570","sourceIdentifier":"secalert@redhat.com","published":"2015-01-09T02:59:00.053","lastModified":"2026-06-17T00:08:31.507","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c."},{"lang":"es","value":"La implementación BN_sqr en OpenSSL anterior a 0.9.8zd, 1.0.0 anterior a 1.0.0p, y 1.0.1 anterior a 1.0.1k no calcula correctamente el cuadrado de un valor BIGNUM, lo que podría facilitar a atacantes remotos superar los mecanismos de protección criptográficos a través de vectores no especificados, relacionado con crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, y crypto/bn/bn_asm.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8zc","matchCriteriaId":"FCFDFDB8-6939-44E8-8B2D-C84D008AE169"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142496179803395&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142496289803847&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142720981827617&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142895206924048&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0849.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1650.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/71939","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033378","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/commit/a7a44ba55cb4f884c6bc9ceac90072dea38e66d0","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT204659","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142496179803395&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142496289803847&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142720981827617&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142895206924048&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0849.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1650.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/71939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/a7a44ba55cb4f884c6bc9ceac90072dea38e66d0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT204659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-3571","sourceIdentifier":"secalert@redhat.com","published":"2015-01-09T02:59:01.287","lastModified":"2026-06-17T00:08:31.777","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c."},{"lang":"es","value":"OpenSSL anterior a 0.9.8zd, 1.0.0 anterior a 1.0.0p, y 1.0.1 anterior a 1.0.1k permite a atacantes remotos causar una denegación de servicio (referencia a puntero nulo y caída de la aplicación) a través de un mensaje DTLS manipulado que se procesa con un operación diferente de lectura para la cabecera de negociación que la del cuerpo de la negociación, relacionado con la función dtls1_get_record en d1_pkt.c y la función ssl3_read_n en s3_pkt.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8zc","matchCriteriaId":"FCFDFDB8-6939-44E8-8B2D-C84D008AE169"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142496179803395&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142496289803847&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142895206924048&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/71937","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033378","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/commit/248385c606620b29ecc96ca9d3603463f879652b","source":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/commit/feba02f3919495e1b960c33ba849e10e77d0785d","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT204659","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142496179803395&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142496289803847&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142895206924048&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/71937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/248385c606620b29ecc96ca9d3603463f879652b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/feba02f3919495e1b960c33ba849e10e77d0785d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT204659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2014-3572","sourceIdentifier":"secalert@redhat.com","published":"2015-01-09T02:59:02.320","lastModified":"2026-06-17T00:08:32.023","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message."},{"lang":"es","value":"La función ssl3_get_key_exchange function en s3_clnt.c en OpenSSL en versiones anteriores a 0.9.8zd, 1.0.0 en versiones anteriores a 1.0.0p y 1.0.1 en versiones anteriores a 1.0.1k permite a servidores SSL remotos llevar a cabo ataques de desactualización ECDHE-to-ECDH y desencadenar una pérdida de confidencialidad directa omitiendo los mensajes ServerKeyExchange."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8zc","matchCriteriaId":"FCFDFDB8-6939-44E8-8B2D-C84D008AE169"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142496179803395&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142496289803847&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142720981827617&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142895206924048&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/71942","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033378","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/commit/b15f8769644b00ef7283521593360b7b2135cb63","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT204659","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142496179803395&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142496289803847&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142720981827617&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142895206924048&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/71942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/b15f8769644b00ef7283521593360b7b2135cb63","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT204659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-8275","sourceIdentifier":"cret@cert.org","published":"2015-01-09T02:59:09.413","lastModified":"2026-06-17T00:16:29.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, related to crypto/asn1/a_verify.c, crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, and crypto/x509/x_all.c."},{"lang":"es","value":"OpenSSL anterior a 0.9.8zd, 1.0.0 anterior a 1.0.0p, y 1.0.1 anterior a 1.0.1k no fuerza ciertas limitaciones sobre datos de certificados, lo que permite a atacantes remotos derrotar un mecanismo de protección de lista negra de certificados basado en huellas dactilares mediante la inclusión de datos manipulados dentro de la porción no firmada de un certificado, relacionado con crypto/asn1/a_verify.c, crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, y crypto/x509/x_all.c."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8zc","matchCriteriaId":"FCFDFDB8-6939-44E8-8B2D-C84D008AE169"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679","source":"cret@cert.org"},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","source":"cret@cert.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"cret@cert.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=142496179803395&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=142496289803847&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=142720981827617&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=142895206924048&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"cret@cert.org"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"cret@cert.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","source":"cret@cert.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","source":"cret@cert.org"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"cret@cert.org"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"cret@cert.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"cret@cert.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"cret@cert.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"cret@cert.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"cret@cert.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"cret@cert.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"cret@cert.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"cret@cert.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/71935","source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id/1033378","source":"cret@cert.org"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"cret@cert.org"},{"url":"https://github.com/openssl/openssl/commit/684400ce192dac51df3d3e92b61830a6ef90be3e","source":"cret@cert.org"},{"url":"https://github.com/openssl/openssl/commit/cb62ab4b17818fe66d2fed0a7fe71969131c811b","source":"cret@cert.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"cret@cert.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"cret@cert.org"},{"url":"https://support.apple.com/HT204659","source":"cret@cert.org"},{"url":"https://support.citrix.com/article/CTX216642","source":"cret@cert.org"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"cret@cert.org","tags":["Vendor Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142496179803395&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142496289803847&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142720981827617&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142895206924048&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/71935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/684400ce192dac51df3d3e92b61830a6ef90be3e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/cb62ab4b17818fe66d2fed0a7fe71969131c811b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT204659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-0204","sourceIdentifier":"secalert@redhat.com","published":"2015-01-09T02:59:10.287","lastModified":"2026-10-14T22:17:01.677","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the \"FREAK\" issue.  NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations."},{"lang":"es","value":"La función ssl3_get_key_exchange en s3_clnt.c en OpenSSL en versiones anteriores a 0.9.8zd, 1.0.0 en versiones anteriores a 1.0.0p y 1.0.1 en versiones anteriores a 1.0.1k permite a servidores SSL remotos llevar a cabo ataques de degradación de versión RSA-a-EXPORT_RSA y facilitar el descifrado de fuerza bruta ofreciendo una clave RSA efímera débil en un rol no sumiso, relacionado con el caso \"FREAK\" . NOTA: el alcance de esta CVE es solo código cliente basado en OpenSSL, no un problema de EXPORT_RSA asociado con servidores u otras implementaciones TLS."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-14T21:04:56.163876Z","id":"CVE-2015-0204","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8zc","matchCriteriaId":"FCFDFDB8-6939-44E8-8B2D-C84D008AE169"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142496179803395&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142496289803847&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142720981827617&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142895206924048&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144043644216842&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0849.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1650.html","source":"secalert@redhat.com"},{"url":"http://support.novell.com/security/cve/CVE-2015-0204.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21883640","source":"secalert@redhat.com"},{"url":"http://www-304.ibm.com/support/docview.wss?uid=swg21960769","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/71936","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033378","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa91","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99707","source":"secalert@redhat.com"},{"url":"https://freakattack.com/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://github.com/openssl/openssl/commit/ce325c60c74b0fa784f5872404b722e120e5cab0","source":"secalert@redhat.com"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201503-11","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT204659","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142496179803395&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142496289803847&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142720981827617&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142895206924048&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144043644216842&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0849.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1650.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/security/cve/CVE-2015-0204.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21883640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-304.ibm.com/support/docview.wss?uid=swg21960769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/71936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa91","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://freakattack.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/openssl/openssl/commit/ce325c60c74b0fa784f5872404b722e120e5cab0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201503-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT204659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-0205","sourceIdentifier":"secalert@redhat.com","published":"2015-01-09T02:59:11.273","lastModified":"2026-06-17T00:19:43.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support."},{"lang":"es","value":"La función ssl3_get_cert_verify en s3_srvr.c en OpenSSL 1.0.0 anterior a 1.0.0p y 1.0.1 anterior a 1.0.1k acepta la autenticación de clientes con un certificado Diffie-Hellman (DH) sin necesidad de un mensaje CertificateVerify, lo que permite a atacantes remotos obtener el acceso sin conocimiento de una clave privada a través de trafico TLS Handshake Protocol manipulado a un servidor que reconoce una autoridad de certificación con soporte DH."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/71941","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033378","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99708","source":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/commit/1421e0c584ae9120ca1b88098f13d6d2e90b83a3","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/71941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/1421e0c584ae9120ca1b88098f13d6d2e90b83a3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-0206","sourceIdentifier":"secalert@redhat.com","published":"2015-01-09T02:59:12.117","lastModified":"2026-06-17T00:19:43.533","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection."},{"lang":"es","value":"Fuga de memoria en la función dtls1_buffer_record en d1_pkt.c en OpenSSL 1.0.0 anterior a 1.0.0p y 1.0.1 anterior a 1.0.1k permite a atacantes remotos causar una denegación de servicio (consumo de memoria) mediante el envío de muchos archivos duplicados para la próxima época, lo que provoca un fallo de la detección de la reproducción."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"}]}]}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/71940","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033378","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99704","source":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/commit/103b171d8fc282ef435f8de9afbf7782e312961f","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/71940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/103b171d8fc282ef435f8de9afbf7782e312961f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-0207","sourceIdentifier":"secalert@redhat.com","published":"2015-03-19T22:59:00.067","lastModified":"2026-06-17T00:19:43.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server."},{"lang":"es","value":"La función dtls1_listen en d1_lib.c en OpenSSL 1.0.2 anterior a 1.0.2a no aísla correctamente la información de estado de flujos de datos independientes, lo que permite a atacantes remotos causar una denegación de servicio (caída de aplicación) a través de trafico DTLS manipulado, tal y como fue demostrado por trafico DTLS 1.0 hacia un servidor DTLS 1.2."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73229","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031929","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202351","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=819418110b6fff4a7b96f01a5d68f71df3e3b736","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-11","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=819418110b6fff4a7b96f01a5d68f71df3e3b736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\" rel=\"nofollow\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2015-0208","sourceIdentifier":"secalert@redhat.com","published":"2015-03-19T22:59:01.350","lastModified":"2026-06-17T00:19:43.893","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted RSA PSS parameters to an endpoint that uses the certificate-verification feature."},{"lang":"es","value":"La implementación de verificación de firma ASN.1 en la función rsa_item_verify en crypto/rsa/rsa_ameth.c en OpenSSL 1.0.2 anterior a 1.0.2a permite a atacantes remotos causar una denegación de servicio (referencia puntero NULO y caída de la aplicación) a través de parámetros modificados RSA PSS a un endpoint que usa la característica de verificación de certificado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73230","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031929","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202369","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=4b22cce3812052fe64fc3f6d58d8cc884e3cb834","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-11","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=4b22cce3812052fe64fc3f6d58d8cc884e3cb834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\" rel=\"nofollow\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2015-0209","sourceIdentifier":"secalert@redhat.com","published":"2015-03-19T22:59:02.617","lastModified":"2026-06-17T00:19:44.020","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import."},{"lang":"es","value":"Vulnerabilidad de uso después de liberación en la función d2i_ECPrivateKey en crypto/ec/ec_asn1.c en OpenSSL anterior a 0.9.8zf, 1.0.0 anterior a 1.0.0r, 1.0.1 anterior a 1.0.1m, y 1.0.2 anterior a 1.0.2a podría permitir a atacantes remotos causar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente tener otro impacto no especificado a través de un fichero de clave privada Elliptic Curve (EC) malformado que se maneja incorrectamente durante su importación."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8ze","matchCriteriaId":"FE2907ED-57AA-41E4-9AC6-055F138B9204"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142841429220765&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1089.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT204942","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3197","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/73239","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1031929","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2537-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/articles/1384453","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1196737","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=1b4a8df38fc9ab3c089ca5765075ee53ec5bd66a","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201503-11","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142841429220765&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1089.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT204942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/73239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1031929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2537-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/articles/1384453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1196737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=1b4a8df38fc9ab3c089ca5765075ee53ec5bd66a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201503-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/416.html\">CWE-416: Use After Free</a>"}},{"cve":{"id":"CVE-2015-0285","sourceIdentifier":"secalert@redhat.com","published":"2015-03-19T22:59:03.723","lastModified":"2026-06-17T00:19:54.433","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and then conducting a brute-force attack."},{"lang":"es","value":"La función ssl3_client_hello en s3_clnt.c en OpenSSL 1.0.2 anterior a 1.0.2a no asegura que el PRNG está sembrado antes de proceder con una negociación, lo que facilita a atacantes remotos superar los mecanismos de protección criptográficos mediante la captura de trafico de la red y posteriormente realizar un ataque de fuerza bruta."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73234","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031929","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202410","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=e1b568dd2462f7cacf98f3d117936c34e2849a6b","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-11","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=e1b568dd2462f7cacf98f3d117936c34e2849a6b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-0286","sourceIdentifier":"secalert@redhat.com","published":"2015-03-19T22:59:04.677","lastModified":"2026-06-17T00:19:54.560","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature."},{"lang":"es","value":"La función ASN1_TYPE_cmp en crypto/asn1/a_type.c en OpenSSL anterior a 0.9.8zf, 1.0.0 anterior a 1.0.0r, 1.0.1 anterior a 1.0.1m, y 1.0.2 anterior a 1.0.2a no realiza correctamente las comparaciones tipo boolean, lo que permite a atacantes remotos causar una denegación de servicio (operación de lectura inválida y caída de aplicación) a través de un certificado X.509 manipulado en un endpoint que utiliza la característica de verificación de certificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-17"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8ze","matchCriteriaId":"FE2907ED-57AA-41E4-9AC6-055F138B9204"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142841429220765&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT204942","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3197","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/73225","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1031929","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032917","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2537-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/articles/1384453","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202366","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c3c7fb07dc975dc3c9de0eddb7d8fd79fc9c67c1","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT205212","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT205267","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142841429220765&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT204942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/73225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1031929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2537-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/articles/1384453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c3c7fb07dc975dc3c9de0eddb7d8fd79fc9c67c1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-0287","sourceIdentifier":"secalert@redhat.com","published":"2015-03-19T22:59:05.770","lastModified":"2026-06-17T00:19:54.780","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse."},{"lang":"es","value":"La función ASN1_item_ex_d2i en crypto/asn1/tasn_dec.c en OpenSSL anterior a 0.9.8zf, 1.0.0 anterior a 1.0.0r, 1.0.1 anterior a 1.0.1m, y 1.0.2 anterior a 1.0.2a no reinicializa estructuras de datos CHOICE y ADB, lo que podría permitir a atacantes causar una denegación de servicio (operación de escritura inválida y corrupción de memoria) mediante el aprovechamiento de una aplicación que depende del reuso de estructuras ASN.1."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-17"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8ze","matchCriteriaId":"FE2907ED-57AA-41E4-9AC6-055F138B9204"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142841429220765&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT204942","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3197","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/73227","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1031929","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2537-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/articles/1384453","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202380","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=b717b083073b6cacc0a5e2397b661678aff7ae7f","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201503-11","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT205212","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT205267","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142841429220765&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT204942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/73227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1031929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2537-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/articles/1384453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=b717b083073b6cacc0a5e2397b661678aff7ae7f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201503-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-0288","sourceIdentifier":"secalert@redhat.com","published":"2015-03-19T22:59:06.880","lastModified":"2026-06-17T00:19:54.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key."},{"lang":"es","value":"La función X509_to_X509_REQ en crypto/x509/x509_req.c en OpenSSL anterior a 0.9.8zf, 1.0.0 anterior a 1.0.0r, 1.0.1 anterior a 1.0.1m, y 1.0.2 anterior a 1.0.2a podría permitir a atacantes causar una denegación de servicio (referencia a puntero nulo y caída de aplicación) a través de una clave de certificado inválida."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8ze","matchCriteriaId":"FE2907ED-57AA-41E4-9AC6-055F138B9204"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142841429220765&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT204942","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3197","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/73237","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1031929","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2537-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/articles/1384453","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202418","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=28a00bcd8e318da18031b2ac8778c64147cd54f9","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"secalert@redhat.com"},{"url":"https://rt.openssl.org/Ticket/Display.html?id=3708&user=guest&pass=guest","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201503-11","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142841429220765&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT204942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/73237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1031929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2537-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/articles/1384453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=28a00bcd8e318da18031b2ac8778c64147cd54f9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rt.openssl.org/Ticket/Display.html?id=3708&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201503-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2015-0289","sourceIdentifier":"secalert@redhat.com","published":"2015-03-19T22:59:07.833","lastModified":"2026-06-17T00:19:55.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c."},{"lang":"es","value":"La implementación PKCS#7 en OpenSSL anterior a 0.9.8zf, 1.0.0 anterior a 1.0.0r, 1.0.1 anterior a 1.0.1m, y 1.0.2 anterior a 1.0.2a no maneja correctamente la falta de ContentInfo exterior, lo que permite a atacantes causar una denegación de servicio (referencia a puntero nulo y caída de aplicación) mediante el aprovechamiento de una aplicación que procesa datos PKCS#7 arbitrarios y la provisión de datos malformados con una codificación ASN.1, relacionado con crypto/pkcs7/pk7_doit.c y crypto/pkcs7/pk7_lib.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8ze","matchCriteriaId":"FE2907ED-57AA-41E4-9AC6-055F138B9204"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142841429220765&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT204942","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3197","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/73231","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1031929","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2537-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/articles/1384453","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202384","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c0334c2c92dd1bc3ad8138ba6e74006c3631b0f9","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201503-11","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142841429220765&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT204942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/73231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1031929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2537-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/articles/1384453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c0334c2c92dd1bc3ad8138ba6e74006c3631b0f9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201503-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2015-0290","sourceIdentifier":"secalert@redhat.com","published":"2015-03-19T22:59:08.787","lastModified":"2026-06-17T00:19:55.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote attackers to cause a denial of service (pointer corruption and application crash) via unspecified vectors."},{"lang":"es","value":"La característica multi-block en la función ssl3_write_bytes en s3_pkt.c en OpenSSL 1.0.2 anterior a 1.0.2a en las plataformas x86 de 64 bits con soporte AES NI no maneja correctamente ciertos casos de no bloqueo I/O, lo que permite a atacantes remotos causar una denegación de servicio (corrupción de puntero y caída de aplicación) a través de vectores no especificados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-17"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73226","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031929","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202345","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=77c77f0a1b9f15b869ca3342186dfbedd1119d0e","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-11","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=77c77f0a1b9f15b869ca3342186dfbedd1119d0e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-0291","sourceIdentifier":"secalert@redhat.com","published":"2015-03-19T22:59:09.660","lastModified":"2026-06-17T00:19:55.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation."},{"lang":"es","value":"La implementación sigalgs en t1_lib.c en OpenSSL 1.0.2 anterior a 1.0.2a permite a atacantes remotos causar una denegación de servicio (referencia a puntero nulo y caída del demonio) mediante el uso de una extensión signature_algorithms inválida en el mensaje ClientHello durante una renegociación."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73235","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031929","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202338","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=76343947ada960b6269090638f5391068daee88d","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-11","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=76343947ada960b6269090638f5391068daee88d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\" rel=\"nofollow\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2015-0292","sourceIdentifier":"secalert@redhat.com","published":"2015-03-19T22:59:10.690","lastModified":"2026-06-17T00:19:55.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow."},{"lang":"es","value":"Subdesbordamiento de enteros en la función EVP_DecodeUpdate en crypto/evp/encode.c en la implementación base64-decoding en OpenSSL anterior a 0.9.8za, 1.0.0 anterior a 1.0.0m, y 1.0.1 anterior a 1.0.1h permite a atacantes remotos causar una denegación de servicio (corrupción de memoria) o posiblemente tener otro impacto no especificado a través de datos base64 manipulados que provocan un desbordamiento de buffer."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8z","matchCriteriaId":"A28EB262-0B86-4956-B15A-66E93EBA408F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3197","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/73228","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1031929","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2537-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/articles/1384453","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202395","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=d0666f289ac013094bbbf547bfbcd616199b7d2d","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"secalert@redhat.com"},{"url":"https://rt.openssl.org/Ticket/Display.html?id=2608&user=guest&pass=guest","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://security.gentoo.org/glsa/201503-11","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/73228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1031929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2537-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/articles/1384453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=d0666f289ac013094bbbf547bfbcd616199b7d2d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rt.openssl.org/Ticket/Display.html?id=2608&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://security.gentoo.org/glsa/201503-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-0293","sourceIdentifier":"secalert@redhat.com","published":"2015-03-19T22:59:11.537","lastModified":"2026-06-17T00:19:55.807","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message."},{"lang":"es","value":"La implementación SSLv2 en OpenSSL anterior a 0.9.8zf, 1.0.0 anterior a 1.0.0r, 1.0.1 anterior a 1.0.1m, y 1.0.2 anterior a 1.0.2a permite a atacantes remotos causar una denegación de servicio (fallo de aserción s2_lib.c y salida del demonio) a través de un mensaje CLIENT-MASTER-KEY manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8ze","matchCriteriaId":"FE2907ED-57AA-41E4-9AC6-055F138B9204"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT204942","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/73232","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1031929","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2537-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/articles/1384453","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202404","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=86f8fb0e344d62454f8daf3e15236b2b59210756","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201503-11","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT204942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/73232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1031929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2537-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/articles/1384453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=86f8fb0e344d62454f8daf3e15236b2b59210756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201503-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-1787","sourceIdentifier":"secalert@redhat.com","published":"2015-03-19T22:59:12.473","lastModified":"2026-06-17T00:22:59.543","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a denial of service (daemon crash) via a ClientKeyExchange message with a length of zero."},{"lang":"es","value":"La función ssl3_get_client_key_exchange en s3_srvr.c en OpenSSL 1.0.2 anterior a 1.0.2a, cuando la autenticación del cliente y un suite de cifrado Diffie-Hellman efímero están habilitados, permite a atacantes remotos causar una denegación de servicio (caída del demonio) a través de un mensaje ClientKeyExchange con una longitud de cero."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73238","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031929","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202406","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=b19d8143212ae5fbc9cebfd51c01f802fabccd33","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-11","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/73238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1031929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa92","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=b19d8143212ae5fbc9cebfd51c01f802fabccd33","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-8176","sourceIdentifier":"secalert@redhat.com","published":"2015-06-12T19:59:00.070","lastModified":"2026-06-17T00:16:26.320","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data."},{"lang":"es","value":"La función dtls1_clear_queues en ssl/d1_lib.c en OpenSSL anterior a 0.9.8za, 1.0.0 anterior a 1.0.0m, y 1.0.1 anterior a 1.0.1h libera estructuras de datos sin considerar que los datos de la aplicación puedan llegar entre un mensaje ChangeCipherSpec y un mensaje Finished, lo que permite a pares remotos de DTLS causar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente tener otro impacto no especificado a través de datos de la aplicación no esperados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8z","matchCriteriaId":"A28EB262-0B86-4956-B15A-66E93EBA408F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1115.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3287","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/75159","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032564","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2639-1","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa98","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/commit/470990fee0182566d439ef7e82d1abf18b7085d7","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10122","source":"secalert@redhat.com"},{"url":"https://openssl.org/news/secadv/20150611.txt","source":"secalert@redhat.com"},{"url":"https://rt.openssl.org/Ticket/Display.html?id=3286&user=guest&pass=guest","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://security.gentoo.org/glsa/201506-02","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150611.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/75159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2639-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa98","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/470990fee0182566d439ef7e82d1abf18b7085d7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://openssl.org/news/secadv/20150611.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rt.openssl.org/Ticket/Display.html?id=3286&user=guest&pass=guest","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://security.gentoo.org/glsa/201506-02","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150611.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-1788","sourceIdentifier":"secalert@redhat.com","published":"2015-06-12T19:59:01.600","lastModified":"2026-06-17T00:22:59.670","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication."},{"lang":"es","value":"La función BN_GF2m_mod_inv en crypto/bn/bn_gf2m.c en OpenSSL anterior a 0.9.8s, 1.0.0 anterior a 1.0.0e, 1.0.1 anterior a 1.0.1n, y 1.0.2 anterior a 1.0.2b no maneja correctamente las estructuras ECParameters en las cuales la curva está por un campo polinomio binario malformado, lo que permite a atacantes remotos causar una denegación de servicio (bucle infinito) a través de una sesión que utiliza un algoritmo Elliptic Curve, tal y como fue demostrado mediante un ataque sobre un servidor que soporta la autenticación de clientes."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8zf","matchCriteriaId":"8F73A6A3-0F0C-461D-AA7A-940A9DBBFE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0r:*:*:*:*:*:*:*","matchCriteriaId":"38721148-F24A-4339-8282-BC2DD9553512"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery","source":"secalert@redhat.com"},{"url":"http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143880121627664&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl","source":"secalert@redhat.com"},{"url":"http://www-304.ibm.com/support/docview.wss?uid=swg21960041","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3287","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/75158","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032564","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2639-1","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa98","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/commit/4924b37ee01f71ae19c94a8934b80eeb2f677932","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10122","source":"secalert@redhat.com"},{"url":"https://openssl.org/news/secadv/20150611.txt","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201506-02","source":"secalert@redhat.com"},{"url":"https://support.apple.com/kb/HT205031","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150611.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143880121627664&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-304.ibm.com/support/docview.wss?uid=swg21960041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/75158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2639-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa98","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/4924b37ee01f71ae19c94a8934b80eeb2f677932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://openssl.org/news/secadv/20150611.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201506-02","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT205031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150611.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-1789","sourceIdentifier":"secalert@redhat.com","published":"2015-06-12T19:59:02.507","lastModified":"2026-06-17T00:22:59.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication with a custom verification callback."},{"lang":"es","value":"La función X509_cmp_time en crypto/x509/x509_vfy.c en OpenSSL anterior a 0.9.8zg, 1.0.0 anterior a 1.0.0s, 1.0.1 anterior a 1.0.1n, y 1.0.2 anterior a 1.0.2b permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango y caída de aplicación) a través de un campo de longitud manipulado en datos ASN1_TIME, tal y como fue demostrado mediante un ataque sobre un servidor que soporta la autenticación de clientes con una rellamada de verificación personalizada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8zf","matchCriteriaId":"8F73A6A3-0F0C-461D-AA7A-940A9DBBFE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0r:*:*:*:*:*:*:*","matchCriteriaId":"38721148-F24A-4339-8282-BC2DD9553512"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:sparc-opl_service_processor:*:*:*:*:*:*:*:*","versionEndIncluding":"1121","matchCriteriaId":"6AF02A45-1811-44F2-B3C9-90C11F5DF6DF"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143654156615516&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143880121627664&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1115.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1197.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3287","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/75156","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032564","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2639-1","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa98","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/commit/f48b83b4fb7d6689584cf25f61ca63a4891f5b11","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05353965","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10122","source":"secalert@redhat.com"},{"url":"https://openssl.org/news/secadv/20150611.txt","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201506-02","source":"secalert@redhat.com"},{"url":"https://support.apple.com/kb/HT205031","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1144-security-advisory-11","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150611.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143654156615516&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143880121627664&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1197.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/75156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2639-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa98","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/f48b83b4fb7d6689584cf25f61ca63a4891f5b11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05353965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://openssl.org/news/secadv/20150611.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201506-02","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT205031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1144-security-advisory-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150611.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-1790","sourceIdentifier":"secalert@redhat.com","published":"2015-06-12T19:59:03.413","lastModified":"2026-06-17T00:23:00.107","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data."},{"lang":"es","value":"La función PKCS7_dataDecode en crypto/pkcs7/pk7_doit.c en OpenSSL anterior a 0.9.8zg, 1.0.0 anterior a 1.0.0s, 1.0.1 anterior a 1.0.1n, y 1.0.2 anterior a 1.0.2b permite a atacantes remotos causar una denegación de servicio (referencia a puntero nulo y caída de aplicación) a través de un blob PKCS#7 que utiliza la codificación ASN.1 y al que le faltan datos EncryptedContent internos."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8zf","matchCriteriaId":"8F73A6A3-0F0C-461D-AA7A-940A9DBBFE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0r:*:*:*:*:*:*:*","matchCriteriaId":"38721148-F24A-4339-8282-BC2DD9553512"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143654156615516&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143880121627664&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1115.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1197.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3287","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/75157","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032564","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2639-1","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa98","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/commit/59302b600e8d5b77ef144e447bb046fd7ab72686","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05353965","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10122","source":"secalert@redhat.com"},{"url":"https://openssl.org/news/secadv/20150611.txt","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201506-02","source":"secalert@redhat.com"},{"url":"https://support.apple.com/kb/HT205031","source":"secalert@redhat.com"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1144-security-advisory-11","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150611.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143654156615516&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143880121627664&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1197.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/75157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2639-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa98","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/59302b600e8d5b77ef144e447bb046fd7ab72686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05353965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://openssl.org/news/secadv/20150611.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201506-02","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT205031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1144-security-advisory-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150611.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2015-1791","sourceIdentifier":"secalert@redhat.com","published":"2015-06-12T19:59:04.397","lastModified":"2026-06-17T00:23:00.330","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier."},{"lang":"es","value":"Condición de carrera en la función ssl3_get_new_session_ticket en ssl/s3_clnt.c en OpenSSL anterior a 0.9.8zg, 1.0.0 anterior a 1.0.0s, 1.0.1 anterior a 1.0.1n, y 1.0.2 anterior a 1.0.2b, cuando utilizado para un cliente multi-hilo, permite a atacantes remotos causar una denegación de servicio (liberación doble y caída de aplicación) o posiblemente tener otro impacto no especificado mediante la provisión de un NewSessionTicket durante un intento de reutilizar un ticket que se había conseguido anteriormente."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8zf","matchCriteriaId":"8F73A6A3-0F0C-461D-AA7A-940A9DBBFE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0r:*:*:*:*:*:*:*","matchCriteriaId":"38721148-F24A-4339-8282-BC2DD9553512"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143880121627664&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1115.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl","source":"secalert@redhat.com"},{"url":"http://www-304.ibm.com/support/docview.wss?uid=swg21960041","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3287","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/75161","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032479","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2639-1","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa98","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/commit/98ece4eebfb6cd45cc8d550c6ac0022965071afc","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05353965","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10122","source":"secalert@redhat.com"},{"url":"https://openssl.org/news/secadv/20150611.txt","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201506-02","source":"secalert@redhat.com"},{"url":"https://support.apple.com/kb/HT205031","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1144-security-advisory-11","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150611.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143880121627664&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-304.ibm.com/support/docview.wss?uid=swg21960041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/75161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2639-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa98","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/98ece4eebfb6cd45cc8d550c6ac0022965071afc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05353965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://openssl.org/news/secadv/20150611.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201506-02","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT205031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1144-security-advisory-11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150611.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-1792","sourceIdentifier":"secalert@redhat.com","published":"2015-06-12T19:59:05.273","lastModified":"2026-06-17T00:23:00.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function."},{"lang":"es","value":"La función do_free_upto en crypto/cms/cms_smime.c en OpenSSL anterior a 0.9.8zg, 1.0.0 anterior a 1.0.0s, 1.0.1 anterior a 1.0.1n, y 1.0.2 anterior a 1.0.2b permite a atacantes remotos causar una denegación de servicio (bucle infinito) a través de vectores que provocan un valor nulo de una estructura de datos BIO, tal y como fue demostrado mediante un X.660 OID no reconocido para una función hash."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8zf","matchCriteriaId":"8F73A6A3-0F0C-461D-AA7A-940A9DBBFE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0r:*:*:*:*:*:*:*","matchCriteriaId":"38721148-F24A-4339-8282-BC2DD9553512"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143654156615516&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143880121627664&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1115.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3287","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/75154","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032564","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2639-1","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa98","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/commit/cd30f03ac5bf2962f44bd02ae8d88245dff2f12c","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05353965","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10122","source":"secalert@redhat.com"},{"url":"https://openssl.org/news/secadv/20150611.txt","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201506-02","source":"secalert@redhat.com"},{"url":"https://support.apple.com/kb/HT205031","source":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150611.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143654156615516&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143880121627664&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/75154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2639-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa98","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/cd30f03ac5bf2962f44bd02ae8d88245dff2f12c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05353965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://openssl.org/news/secadv/20150611.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201506-02","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT205031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150611.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-3216","sourceIdentifier":"secalert@redhat.com","published":"2015-07-07T10:59:00.087","lastModified":"2026-06-17T00:25:33.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in openssl-1.0.1e-25.el7 in Red Hat Enterprise Linux (RHEL) 7 and other products, allows remote attackers to cause a denial of service (application crash) by establishing many TLS sessions to a multithreaded server, leading to use of a negative value for a certain length field."},{"lang":"es","value":"Condición de carrera en cierto parche Red Hat patch a la implementación PRNG lock en la función ssleay_rand_bytes en OpenSSL, distribuido en openssl-1.0.1e-25.el7 en Red Hat Enterprise Linux (RHEL) 7 y otros productos, permite a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante el establecimiento de muchas sesiones TLS en un servidor de múltiples hilos, conduciendo al uso de un valor negativo para cierto campo de longitud."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"},{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e-25.el7:*:*:*:*:*:*:*","matchCriteriaId":"A072AA49-749C-48EF-AD15-BE4A5BBE1AB8"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1115.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/75219","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032587","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1225994","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/75219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1225994","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-1793","sourceIdentifier":"secalert@redhat.com","published":"2015-07-09T19:17:00.093","lastModified":"2026-06-17T00:23:00.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate."},{"lang":"es","value":"La función de verificación de certificado X509 en crypto/x509/x509_vfy.c en OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, y 1.0.2c no procesa correctamente los valores cA de restricción básica del X.509 durante la identificación de cadenas de certificado alternativo, lo que permite a atacantes remotos suplantar una función de autoridad de certificación y propiciar verificaciones de certificado involuntarias a través de un leaf certificate válido."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:supply_chain_products_suite:6.1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F958CB89-F7D2-4773-86D9-4C225ED44128"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:supply_chain_products_suite:6.1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"5BF690CE-E83D-4C92-A0F2-5A5A450F73F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:supply_chain_products_suite:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4D4C8E58-FD8C-4269-98B2-FAB85271C9C1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.1:*:*:*:*:*:*:*","matchCriteriaId":"3581A634-36D3-4EA1-A08F-973E216B6DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*","matchCriteriaId":"41684398-18A4-4DC6-B8A2-3EBAA0CBF9A6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:opus_10g_ethernet_switch_family:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0.6","matchCriteriaId":"D5646853-D852-45B8-8835-2C77C937FC9D"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery","source":"secalert@redhat.com"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161747.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161782.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143880121627664&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144370846326989&w=2","source":"secalert@redhat.com"},{"url":"http://openssl.org/news/secadv_20150709.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150710-openssl","source":"secalert@redhat.com"},{"url":"http://www.fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/75652","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1032817","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.561427","source":"secalert@redhat.com"},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454058.htm","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=9a0db453ba017ebcaccbee933ee6511a9ae4d1c8","source":"secalert@redhat.com"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04822825","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"secalert@redhat.com"},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10125","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201507-15","source":"secalert@redhat.com"},{"url":"https://www.exploit-db.com/exploits/38640/","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15:12.openssl.asc","source":"secalert@redhat.com"},{"url":"http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161747.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161782.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143880121627664&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144370846326989&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/secadv_20150709.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150710-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/75652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.561427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454058.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=9a0db453ba017ebcaccbee933ee6511a9ae4d1c8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04822825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201507-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/38640/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-3837","sourceIdentifier":"security@android.com","published":"2015-10-01T00:59:21.467","lastModified":"2026-06-17T00:26:22.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSLX509Certificate class in org/conscrypt/OpenSSLX509Certificate.java in Android before 5.1.1 LMY48I improperly includes certain context data during serialization and deserialization, which allows attackers to execute arbitrary code via an application that sends a crafted Intent, aka internal bug 21437603."},{"lang":"es","value":"La clase OpenSSLX509Certificate en org/conscrypt/OpenSSLX509Certificate.java en Android en versiones anteriores a 5.1.1 LMY48I incluye indebidamente determinados datos de contexto durante la serialización y deserialización, lo que permite a atacantes ejecutar código arbitrario a través de una aplicación que envía un Intent manipulado, también conocido como error interno 21437603."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1","matchCriteriaId":"3573E693-716C-4B92-AC87-6466CBC26527"}]}]}],"references":[{"url":"https://android.googlesource.com/platform/external/conscrypt/+/edf7055461e2d7fa18de5196dca80896a56e3540","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ","source":"security@android.com","tags":["Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/external/conscrypt/+/edf7055461e2d7fa18de5196dca80896a56e3540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2015-1794","sourceIdentifier":"secalert@redhat.com","published":"2015-12-06T20:59:00.127","lastModified":"2026-06-17T00:23:00.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message."},{"lang":"es","value":"La función ssl3_get_key_exchange en ssl/s3_clnt.c en OpenSSL 1.0.2 en versiones anteriores a 1.0.2e permite a servidores remotos provocar una denegación de servicio (fallo de segmentación) a través de un valor cero p en un mensaje anónimo de Diffie-Hellman (DH) ServerKeyExchange."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/openssl-advisory-december-2015","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com"},{"url":"http://openssl.org/news/secadv/20151203.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1034294","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2830-1","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ada57746b6b80beae73111fe1291bf8dd89af91c","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322","source":"secalert@redhat.com"},{"url":"http://fortiguard.com/advisory/openssl-advisory-december-2015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/secadv/20151203.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2830-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ada57746b6b80beae73111fe1291bf8dd89af91c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-3193","sourceIdentifier":"secalert@redhat.com","published":"2015-12-06T20:59:02.613","lastModified":"2026-06-17T00:25:30.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite."},{"lang":"es","value":"La implementación de exponenciación al cuadrado de Montgomery en crypto/bn/asm/x86_64-mont5.pl en OpenSSL 1.0.2 en versiones anteriores a 1.0.2e en la plataforma x86_64, como se utiliza por la función BN_mod_exp, no maneja correctamente la propagación de acarreo y produce una salida incorrecta, lo que hace más fácil para atacantes remotos obtener información sensible de las claves privadas a través de un ataque contra el uso de una suite de cifrado (1) Diffie-Hellman (DH) o (2) Diffie-Hellman Ephemeral (DHE)."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.3","matchCriteriaId":"F4D8C744-2E80-4113-BF7C-C1C6EBF59C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.1.1","matchCriteriaId":"9F188326-191D-4C75-B821-1712EEC6C1F4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/openssl-advisory-december-2015","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20151203.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/openssl-advisory-december-2015","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/78705","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034294","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.539966","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2830-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/31-Fuzzing-Math-miscalculations-in-OpenSSLs-BN_mod_exp-CVE-2015-3193.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1288317","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=d73cc256c8e256c32ed959456101b73ba9842f72","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.isc.org/article/AA-01438","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://fortiguard.com/advisory/openssl-advisory-december-2015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20151203.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/openssl-advisory-december-2015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/78705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.539966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2830-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.fuzzing-project.org/31-Fuzzing-Math-miscalculations-in-OpenSSLs-BN_mod_exp-CVE-2015-3193.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1288317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=d73cc256c8e256c32ed959456101b73ba9842f72","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.isc.org/article/AA-01438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-3194","sourceIdentifier":"secalert@redhat.com","published":"2015-12-06T20:59:04.707","lastModified":"2026-06-17T00:25:30.733","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter."},{"lang":"es","value":"crypto/rsa/rsa_ameth.c en OpenSSL 1.0.1 en versiones anteriores a 1.0.1q y 1.0.2 en versiones anteriores a 1.0.2e permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída de aplicación) a través de una firma RSA PSS ASN.1 que carece de un parámetro de función de generación de máscara."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"0.10.0","versionEndExcluding":"0.10.41","matchCriteriaId":"6938258D-CD7F-4D26-8AEC-166F699112B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"0.12.0","versionEndExcluding":"0.12.9","matchCriteriaId":"7C420E9F-C071-4B7A-A79D-E8C6A699CE01"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.2.3","matchCriteriaId":"70003343-C6CD-4254-B0FA-934B28278AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.1.1","matchCriteriaId":"D2A5B479-9CF7-4DB3-A10E-C093726476E1"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/openssl-advisory-december-2015","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00087.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145382583417444&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20151203.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2617.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3413","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/openssl-advisory-december-2015","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/78623","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034294","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2830-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1288320","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c394a488942387246653833359a5c94b5832674e","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=d8541d7e9e63bf5f343af24644046c8d96498c17","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://fortiguard.com/advisory/openssl-advisory-december-2015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145382583417444&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20151203.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2617.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/openssl-advisory-december-2015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/78623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2830-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1288320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c394a488942387246653833359a5c94b5832674e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=d8541d7e9e63bf5f343af24644046c8d96498c17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-3195","sourceIdentifier":"secalert@redhat.com","published":"2015-12-06T20:59:05.973","lastModified":"2026-06-17T00:25:30.927","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application."},{"lang":"es","value":"La implementación ASN1_TFLG_COMBINE en crypto/asn1/tasn_dec.c en OpenSSL en versiones anteriores a 0.9.8zh, 1.0.0 en versiones anteriores a 1.0.0t, 1.0.1 en versiones anteriores a 1.0.1q y 1.0.2 en versiones anteriores a 1.0.2e no maneja correctamente los errores provocados por datos X509_ATTRIBUTE malformados, lo que permite a atacantes remotos obtener información sensible de memoria de proceso desencadenando un fallo de decodificación en una aplicación PKCS#7 o CMS."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.11.4","matchCriteriaId":"7A594A00-699D-4899-AEE5-E6B9B948FB62"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:api_gateway:11.1.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0F27F67F-FE01-4D53-8A89-96C84DE49F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5553591-073B-45E3-999F-21B8BA2EEE22"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_webrtc_session_controller:7.0:*:*:*:*:*:*:*","matchCriteriaId":"EFDB5ADE-F4DF-4054-8628-5EF6C5DB864B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_webrtc_session_controller:7.1:*:*:*:*:*:*:*","matchCriteriaId":"59C4F882-5B42-43E6-9CCC-D2AB23117A7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:*","matchCriteriaId":"726DB59B-00C7-444E-83F7-CB31032482AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:exalogic_infrastructure:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CB059A52-DE6D-47FB-98E8-5A788E1C0FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:exalogic_infrastructure:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D70580AD-2134-49D3-BE15-020023A10E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:11.5.10.2:*:*:*:*:*:*:*","matchCriteriaId":"ECBEAF3E-B4AA-48DE-AD14-A1B79630DD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:life_sciences_data_hub:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5C4DAF41-56BC-4AFA-9189-C7F6555FE05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:sun_ray_software:11.1:*:*:*:*:*:*:*","matchCriteriaId":"44A1C87F-DB77-4BD7-93BF-ADB70F2E9DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:transportation_management:6.1:*:*:*:*:*:*:*","matchCriteriaId":"606B0DB7-A09D-47A2-B9FC-2852C149D5E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:transportation_management:6.2:*:*:*:*:*:*:*","matchCriteriaId":"D0216F26-3BA1-48A2-9BE2-31EA3F0239F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_server:3.2:*:*:*:*:*:x86:*","matchCriteriaId":"FC9E8528-0FB8-4BF0-A9EF-6CC84A2631A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3.36","matchCriteriaId":"3F2DB6DC-9A66-47D3-BE56-6E89E2682417"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.14","matchCriteriaId":"1D516C30-6F10-4531-B0A4-4479815CD966"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndIncluding":"4.0.4","matchCriteriaId":"D5DF5E36-74D2-4DFB-B1D0-A5D3D709C252"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5:-:*:*:*:*:*:*","matchCriteriaId":"62A2AC02-A933-4E51-810E-5D040B476B7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*","matchCriteriaId":"D7B037A8-72A6-4DFF-94B2-D688A5F6F876"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*","matchCriteriaId":"44B8FEDF-6CB0-46E9-9AD7-4445B001C158"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.8zh","matchCriteriaId":"93668270-B838-483C-8BE7-F1D8FBF45A6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndExcluding":"1.0.0t","matchCriteriaId":"4A4E8B83-D5BA-4026-AE58-41A6775C25E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.1","versionEndExcluding":"1.0.1q","matchCriteriaId":"D5080085-7307-47DE-8CB4-90E5EB43E735"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2e","matchCriteriaId":"4C72E267-D0DC-4B13-80D4-6425FFE290BB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"133AAFA7-AF42-4D7B-8822-AA2E85611BF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D669D4-6D7E-449D-80C1-28FA44F06FFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7431ABC1-9252-419E-8CC1-311B41360078"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"17F256A9-D3B9-4C72-B013-4EFD878BFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*","matchCriteriaId":"DE554781-1EB9-446E-911F-6C11970C47F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*","matchCriteriaId":"35BBD83D-BDC7-4678-BE94-639F59281139"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/openssl-advisory-december-2015","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00087.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00103.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145382583417444&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20151203.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2616.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2617.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2056.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3413","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/openssl-advisory-december-2015","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/78626","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034294","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2830-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=cc598f321fbac9c04da5766243ed55d55948637d","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206167","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://fortiguard.com/advisory/openssl-advisory-december-2015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145382583417444&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20151203.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2616.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2617.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/openssl-advisory-december-2015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/78626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2830-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=cc598f321fbac9c04da5766243ed55d55948637d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-3196","sourceIdentifier":"secalert@redhat.com","published":"2015-12-06T20:59:06.913","lastModified":"2026-06-17T00:25:31.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message."},{"lang":"es","value":"ssl/s3_clnt.c en OpenSSL 1.0.0 en versiones anteriores a 1.0.0t, 1.0.1 en versiones anteriores a 1.0.1p y 1.0.2 en versiones anteriores a 1.0.2d, cuando es utilizado por un cliente multi hilo, escribe la pista de identidad PSK en una estructura de datos incorrecta, lo que permite a servidores remotos provocar una denegación de servicio (condición de carrera y liberación doble) a través de un mensaje ServerKeyExchange manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:certd:*:*:*","matchCriteriaId":"87037877-8506-4737-9F47-2CB687975B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_sso_agent_option:10.0:*:*:*:*:*:*:*","matchCriteriaId":"531FE660-C1A9-4C83-90BE-E38AA493D4F7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0r:*:*:*:*:*:*:*","matchCriteriaId":"38721148-F24A-4339-8282-BC2DD9553512"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0s:*:*:*:*:*:*:*","matchCriteriaId":"48CE49C8-0672-46A0-BCD0-C0E62801444E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3.0","versionEndIncluding":"4.3.35","matchCriteriaId":"36654E81-CCF3-4E1F-BAEB-09F26BD7866C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.13","matchCriteriaId":"DA344833-47A9-4AC4-B0AA-7A0F58B40C0C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","matchCriteriaId":"253C303A-E577-4488-93E6-68A8DD942C38"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*","matchCriteriaId":"6C81647C-9A53-481D-A54C-36770A093F90"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"A8442C20-41F9-47FD-9A12-E724D3A31FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"BF77CDCF-B9C9-427D-B2BF-36650FB2148C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://fortiguard.com/advisory/openssl-advisory-december-2015","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145382583417444&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20151203.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2617.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3413","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/openssl-advisory-december-2015","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/78622","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034294","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2830-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=3c66a669dfc7b3792f7af0758ea26fe8502ce70c","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://fortiguard.com/advisory/openssl-advisory-december-2015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145382583417444&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20151203.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2617.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.fortiguard.com/advisory/openssl-advisory-december-2015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/78622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1034294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2830-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=3c66a669dfc7b3792f7af0758ea26fe8502ce70c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-3276","sourceIdentifier":"secalert@redhat.com","published":"2015-12-07T20:59:03.023","lastModified":"2026-06-17T00:25:39.363","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors."},{"lang":"es","value":"La función nss_parse_ciphers en libraries/libldap/tls_m.c en OpenLDAP no analiza adecuadamente cadenas de cifrado en modo multiclave de estilo OpenSSL, lo que podría provocar el uso de un cifrado más débil que el previsto y permitir a atacantes remotos tener un impacto no especificado a través de vectores desconocidos."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5","matchCriteriaId":"A94A47B9-02DC-4085-AB11-90AB2753B5D2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*","matchCriteriaId":"44B8FEDF-6CB0-46E9-9AD7-4445B001C158"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"807C024A-F8E8-4B48-A349-4C68CD252CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"F96E3779-F56A-45FF-BB3D-4980527D721E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"83737173-E12E-4641-BC49-0BD84A6B29D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"7431ABC1-9252-419E-8CC1-311B41360078"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*","matchCriteriaId":"17F256A9-D3B9-4C72-B013-4EFD878BFEA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2015-2131.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1034221","source":"secalert@redhat.com","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1238322","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2131.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1034221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1238322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-3197","sourceIdentifier":"secalert@redhat.com","published":"2016-02-15T02:59:01.980","lastModified":"2026-06-17T00:25:31.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions."},{"lang":"es","value":"ssl/s2_srvr.c en OpenSSL 1.0.1 en versiones anteriores a 1.0.1r y 1.0.2 en versiones anteriores a 1.0.2f no impide el uso de cifrados deshabilitados, lo que hace que sea más fácil para atacantes man-in-the-middle vencer los mecanismos de protección criptográfica llevando a cabo cálculos sobre tráfico SSLv2, relacionado con las funciones get_client_master_key y get_client_hello."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:tuxedo:12.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"ED0F7609-6AF0-4EEB-8531-8E66C6D18A64"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:exalogic_infrastructure:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CB059A52-DE6D-47FB-98E8-5A788E1C0FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:exalogic_infrastructure:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D70580AD-2134-49D3-BE15-020023A10E87"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.53:*:*:*:*:*:*:*","matchCriteriaId":"7F56F01F-9580-4858-A98F-63AD48491328"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.54:*:*:*:*:*:*:*","matchCriteriaId":"CDD82442-3535-4BB9-8888-F61A35B900AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oss_support_tools:8.11.16.3.8:*:*:*:*:*:*:*","matchCriteriaId":"125C0E9C-3052-461E-8903-A60568AC0634"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:5.0.16:*:*:*:*:*:*:*","matchCriteriaId":"EF12AB67-8C57-4BF7-AD3B-58B50A5B2023"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176373.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv/20160128.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/82237","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1034849","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=d81a1600588b726c2bdccda7efad3cc7a87d6245","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03724en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390893","source":"secalert@redhat.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:11.openssl.asc","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201601-05","source":"secalert@redhat.com"},{"url":"https://www.kb.cert.org/vuls/id/257823","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176373.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv/20160128.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/82237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=d81a1600588b726c2bdccda7efad3cc7a87d6245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03724en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:11.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201601-05","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/257823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0701","sourceIdentifier":"secalert@redhat.com","published":"2016-02-15T02:59:18.013","lastModified":"2026-06-17T00:38:02.627","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file."},{"lang":"es","value":"La función DH_check_pub_key en crypto/dh/dh_check.c en OpenSSL 1.0.2 en versiones anteriores a 1.0.2f no asegura que los número primos son apropiados para el intercambio de clave Diffie-Hellman (DH), lo que hace que sea más fácil para atacantes remotos descubrir el exponente DH privado mediante la realización de múltiples apretones de mano con un par que eligió un número inapropiado, según lo demostrado por un número en un archivo X9.42."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"}]}]}],"references":[{"url":"http://intothesymmetry.blogspot.com/2016/01/openssl-key-recovery-attack-on-dh-small.html","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176373.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com"},{"url":"http://www.openssl.org/news/secadv/20160128.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/82233","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1034849","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2883-1","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=878e2c5b13010329c203f309ed0c8f2113f85648","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c5b831f21d0d29d1e517d139d9d101763f60c9a2","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03724en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164821","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390893","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201601-05","source":"secalert@redhat.com"},{"url":"https://www.kb.cert.org/vuls/id/257823","source":"secalert@redhat.com"},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"secalert@redhat.com"},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"secalert@redhat.com"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"secalert@redhat.com"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"secalert@redhat.com"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"secalert@redhat.com"},{"url":"http://intothesymmetry.blogspot.com/2016/01/openssl-key-recovery-attack-on-dh-small.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176373.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openssl.org/news/secadv/20160128.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/82233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1034849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2883-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=878e2c5b13010329c203f309ed0c8f2113f85648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c5b831f21d0d29d1e517d139d9d101763f60c9a2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03724en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201601-05","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/257823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0800","sourceIdentifier":"secalert@redhat.com","published":"2016-03-01T20:59:00.253","lastModified":"2026-06-17T00:38:15.603","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a \"DROWN\" attack."},{"lang":"es","value":"El protocolo SSLv2, como se utiliza en OpenSSL en versiones anteriores a 1.0.1s y 1.0.2 en versiones anteriores a 1.0.2g y otros productos requiere un servidor para enviar un mensaje ServerVerify antes de establecer que un cliente posee ciertos datos RSA en texto plano, lo que facilita a atacantes remotos descifrar datos de texto cifrados con TLS aprovechándose de un Bleichenbacher RSA padding oracle, también conocida como ataque \"DROWN\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:client:-:*:*:*:*:iphone_os:*:*","matchCriteriaId":"B0648626-6AAC-4338-A258-7536866A3B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:steel_belted_radius:-:*:*:*:*:*:*:*","matchCriteriaId":"AF972AB5-74AE-4ED0-81FA-706D6A8DE67A"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10722","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=145983526810210&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=146108058503441&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=146133665209436&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1519.html","source":"secalert@redhat.com"},{"url":"http://support.citrix.com/article/CTX208403","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"secalert@redhat.com"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-openssl-en","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83733","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035133","source":"secalert@redhat.com"},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-623229.pdf","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/vulnerabilities/drown","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-623229.pdf","source":"secalert@redhat.com"},{"url":"https://drownattack.com","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05096953","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05143554","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176765","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05307589","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804","source":"secalert@redhat.com"},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","source":"secalert@redhat.com"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-103-03","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10154","source":"secalert@redhat.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"secalert@redhat.com"},{"url":"https://security.netapp.com/advisory/ntap-20160301-0001/","source":"secalert@redhat.com"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18","source":"secalert@redhat.com"},{"url":"https://www.kb.cert.org/vuls/id/583776","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=145983526810210&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=146108058503441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=146133665209436&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1519.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/CTX208403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-openssl-en","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-623229.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/security/vulnerabilities/drown","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-623229.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://drownattack.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05096953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05143554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05307589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-103-03","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160301-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/583776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0703","sourceIdentifier":"secalert@redhat.com","published":"2016-03-02T11:59:00.113","lastModified":"2026-06-17T00:38:03.010","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800."},{"lang":"es","value":"La función get_client_master_key en s2_srvr.c en la implementación de SSLv2 en OpenSSL en versiones anteriores a 0.9.8zf, 1.0.0 en versiones anteriores a 1.0.0r, 1.0.1 en versiones anteriores a 1.0.1m y 1.0.2 en versiones anteriores a 1.0.2a acepta un valor CLIENT-MASTER-KEY CLEAR-KEY-LENGTH distinto de cero para un cifrado arbitrario, lo que permite a atacantes man-in-the-middle determinar el valor MASTER-KEY y descifrar datos de texto cifrados con TLS aprovechándose de un Bleichenbacher RSA padding oracle, un caso relacionado con CVE-2016-0800."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8ze","matchCriteriaId":"FE2907ED-57AA-41E4-9AC6-055F138B9204"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"secalert@redhat.com"},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83743","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035133","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://drownattack.com","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"secalert@redhat.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"secalert@redhat.com"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://drownattack.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0704","sourceIdentifier":"secalert@redhat.com","published":"2016-03-02T11:59:01.363","lastModified":"2026-06-17T00:38:03.183","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800."},{"lang":"es","value":"Un mecanismo de protección oracle en la función get_client_master_key en s2_srvr.c en la implementación de SSLv2 en OpenSSL en versiones anteriores a 0.9.8zf, 1.0.0 en versiones anteriores a 1.0.0r, 1.0.1 en versiones anteriores a 1.0.1m y 1.0.2 en versiones anteriores a 1.0.2a sobrescribe MASTER-KEY bytes incorrectos durante el uso de suites de cifrado de exportación, lo que facilita a atacantes remotos el descifrado de datos de texto cifrados con TLS aprovechándose de un Bleichenbacher RSA padding oracle, un caso relacionado con CVE-2016-0800."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.8ze","matchCriteriaId":"FE2907ED-57AA-41E4-9AC6-055F138B9204"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"secalert@redhat.com"},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83764","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035133","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://drownattack.com","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"secalert@redhat.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://drownattack.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0702","sourceIdentifier":"secalert@redhat.com","published":"2016-03-03T20:59:00.080","lastModified":"2026-06-17T00:38:02.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a \"CacheBleed\" attack."},{"lang":"es","value":"La función MOD_EXP_CTIME_COPY_FROM_PREBUF en crypto/bn/bn_exp.c en OpenSSL 1.0.1 en versiones anteriores a 1.0.1s y 1.0.2 en versiones anteriores a 1.0.2g no considera correctamente las veces que se accede al cache-bank durante la exponenciación modular, lo que facilita a usuarios locales descubrir las claves RSA ejecutando una aplicación manipulada en el mismo núcleo de la CPU Intel Sandy Bridge como víctima y aprovechándose de los conflictos del cache-bank, también conocida como un ataque \"CacheBleed\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.4,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.3.2","matchCriteriaId":"30C92A41-47F3-46D7-AD29-66B717E6D5BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.7.1","matchCriteriaId":"183CD912-7D2E-4CCD-BA99-05AF9E685030"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]}],"references":[{"url":"http://cachebleed.info","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145889460330120&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3500","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035133","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2914-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=708dc2f1291e104fe4eef810bb8ffc1fae5b19c1","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201603-15","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://cachebleed.info","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145889460330120&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2914-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=708dc2f1291e104fe4eef810bb8ffc1fae5b19c1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201603-15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-0705","sourceIdentifier":"secalert@redhat.com","published":"2016-03-03T20:59:00.953","lastModified":"2026-06-17T00:38:03.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key."},{"lang":"es","value":"Vulnerabilidad de liberación doble en la función dsa_priv_decode en crypto/dsa/dsa_ameth.c en OpenSSL 1.0.1 en versiones anteriores a 1.0.1s y 1.0.2 en versiones anteriores a 1.0.2g permite a atacantes remotos causar una denegación de servicio (corrupción de memoria) o posiblemente tener otro impacto no especificado a través de una clave DSA privada malformada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.29","matchCriteriaId":"D880856F-559E-43B5-9D46-181D01C0E8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.11","matchCriteriaId":"04D3333B-F3AC-4BB9-9F38-AC0BA9B5B8F7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145889460330120&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145983526810210&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=146108058503441&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3500","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/83754","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035133","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2914-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2568","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2575","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2713","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6c88c71b4e4825c7bc0489306d062d017634eb88","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201603-15","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145889460330120&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145983526810210&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=146108058503441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/83754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2914-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6c88c71b4e4825c7bc0489306d062d017634eb88","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201603-15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/415.html\" rel=\"nofollow\">CWE-415: Double Free</a>"}},{"cve":{"id":"CVE-2016-0797","sourceIdentifier":"secalert@redhat.com","published":"2016-03-03T20:59:01.813","lastModified":"2026-06-17T00:38:14.947","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c."},{"lang":"es","value":"Múltiples desbordamientos de entero en OpenSSL 1.0.1 en versiones anteriores a 1.0.1s y 1.0.2 en versiones anteriores a 1.0.2g permiten a atacantes remotos causar una denegación de servicio (corrupción de memoria dinámica o referencia a puntero NULL) o posiblemente tener otro impacto no especificado a través de una cadena de dígitos de gran tamaño que no es manejada correctamente por la función (1) BN_dec2bn o (2) BN_hex2bn, relacionada con crypto/bn/bn.h y crypto/bn/bn_print.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.1.2","matchCriteriaId":"8B5C9903-298B-4084-A505-E60A00A63558"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.3.2","matchCriteriaId":"30C92A41-47F3-46D7-AD29-66B717E6D5BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.7.1","matchCriteriaId":"D2CA8815-F276-45E9-8B31-93135D49B7EC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145889460330120&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3500","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/83763","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035133","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2914-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c175308407858afff3fc8c2e5e085d94d12edc7d","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10156","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201603-15","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=145889460330120&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/83763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2914-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c175308407858afff3fc8c2e5e085d94d12edc7d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201603-15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/190.html\">CWE-190: Integer Overflow or Wraparound</a>\n<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2016-0798","sourceIdentifier":"secalert@redhat.com","published":"2016-03-03T20:59:02.877","lastModified":"2026-06-17T00:38:15.177","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c."},{"lang":"es","value":"Fuga de memoria en la implementación de SRP_VBASE_get_by_user en OpenSSL 1.0.1 en versiones anteriores a 1.0.1s y 1.0.2 en versiones anteriores a 1.0.2g permite a atacantes remotos causar una denegación de servicio (consumo de memoria) proporcionando un nombre de usuario no válido en un intento de conexión, relacionada con apps/s_server.c y crypto/srp/srp_vfy.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com"},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3500","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83705","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035133","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2914-1","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=259b664f950c2ba66fbf4b0fe5281327904ead21","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"secalert@redhat.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2914-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=259b664f950c2ba66fbf4b0fe5281327904ead21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-0799","sourceIdentifier":"secalert@redhat.com","published":"2016-03-03T20:59:03.797","lastModified":"2026-06-17T00:38:15.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842."},{"lang":"es","value":"La función fmtstr en crypto/bio/b_print.c en OpenSSL 1.0.1 en versiones anteriores a 1.0.1s y 1.0.2 en versiones anteriores a 1.0.2g calcula incorrectamenteno longitudes de cadena, lo que permite a atacantes remotos causar una denegación de servicio (desbordamiento y lectura fuera de rango) o posiblemente causar otro impacto no especificado a través de una cadena larga de carácteres, como ha quedado demostrado por una gran cantidad de ASN.1 data, una vulnerabilidad diferente a CVE-2016-2842."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:client:-:*:*:*:*:android:*:*","matchCriteriaId":"1622DC8A-1ECF-4FAC-88BA-3433AA249B4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:client:-:*:*:*:*:iphone_os:*:*","matchCriteriaId":"B0648626-6AAC-4338-A258-7536866A3B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:pulsesecure:steel_belted_radius:-:*:*:*:*:*:*:*","matchCriteriaId":"AF972AB5-74AE-4ED0-81FA-706D6A8DE67A"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=145983526810210&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=146108058503441&w=2","source":"secalert@redhat.com"},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3500","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/83755","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035133","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2914-1","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=578b956fe741bf8e84055547b1e83c28dd902c73","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"secalert@redhat.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=145983526810210&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=146108058503441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/83755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2914-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=578b956fe741bf8e84055547b1e83c28dd902c73","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2842","sourceIdentifier":"cve@mitre.org","published":"2016-03-03T20:59:04.737","lastModified":"2026-06-17T00:44:34.317","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799."},{"lang":"es","value":"La función doapr_outch en crypto/bio/b_print.c en OpenSSL 1.0.1 en versiones anteriores a 1.0.1s y 1.0.2 en versiones anteriores a 1.0.2g no verifica que una asignación determinada de memoria tenga éxito, lo que permite a atacantes remotos causar una denegación de servicio (escritura fuera de rango o consumo de memoria) o posiblemente causar otro impacto no especificado a través de una cadena de carácteres más larga, como ha quedado demostrado por una gran cantidad de ASN.1 data, una vulnerabilidad diferente a CVE-2016-0799."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=145983526810210&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=146108058503441&w=2","source":"cve@mitre.org"},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/84169","source":"cve@mitre.org"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=578b956fe741bf8e84055547b1e83c28dd902c73","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917","source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10152","source":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20160321-0001/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=145983526810210&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=146108058503441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openssl.org/news/secadv/20160301.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=578b956fe741bf8e84055547b1e83c28dd902c73","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160321-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1254","sourceIdentifier":"cve@mitre.org","published":"2016-05-05T01:59:00.137","lastModified":"2026-06-16T21:53:27.853","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms."},{"lang":"es","value":"crypto/rsa/rsa_gen.c en OpenSSL en versiones anteriores a 0.9.6 maneja incorrectamente operaciones de desplazamiento a nivel de bit en C que exceden el tamaño de una expresión, lo que facilita a atacantes remotos vencer mecanismos de protección criptográfica aprovechando la generación incorrecta de claves RSA sobre plataformas HP-UX de 64-bit."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.5","matchCriteriaId":"445C6389-2679-4147-BB14-8B291F9E1375"}]}]}],"references":[{"url":"http://marc.info/?l=openssl-users&m=95961024500509","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/04/17","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/90109","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1035750","source":"cve@mitre.org"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=db82b8f9bd432a59aea8e1014694e15fc457c2bb","source":"cve@mitre.org"},{"url":"http://marc.info/?l=openssl-users&m=95961024500509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/05/04/17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/90109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=db82b8f9bd432a59aea8e1014694e15fc457c2bb","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2105","sourceIdentifier":"secalert@redhat.com","published":"2016-05-05T01:59:01.200","lastModified":"2026-06-17T00:43:26.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data."},{"lang":"es","value":"Desbordamiento de entero en la función EVP_EncodeUpdate en crypto/evp/encode.c en OpenSSL en versiones anteriores a 1.0.1t y 1.0.2 en versiones anteriores a 1.0.2h permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria dinámica) a través de una gran cantidad de datos binarios."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*","matchCriteriaId":"8CDFD93B-693D-46DC-9C39-FDECB3E619E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.30","matchCriteriaId":"E8519121-8EA3-4851-A824-13921232DB02"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.12","matchCriteriaId":"2E576DEB-1E39-4582-BFAA-E1D9F311242D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"39A901D6-0874-46A4-92A8-5F72C7A89E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:*","matchCriteriaId":"854A3AE0-E319-46F9-BDDF-425D967A5C82"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*","matchCriteriaId":"A491B32F-31F0-4151-AE9B-313CBF2C060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"0.10.0","versionEndExcluding":"0.10.45","matchCriteriaId":"1CBD1B3E-644C-42B4-A556-7A4C58D219D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"0.12.0","versionEndExcluding":"0.12.14","matchCriteriaId":"2E35B5D6-6D7B-4D04-A8E4-88C4C47270AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.4.4","matchCriteriaId":"BA51558F-F55C-48B3-870B-6D1225998AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.11.1","matchCriteriaId":"29D607F1-B2A0-49FE-B9F3-B1C94A59104B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.0.0:*:*:*:-:*:*:*","matchCriteriaId":"BD30B503-CD0A-4CCF-A346-AF5F4BD379FD"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1648.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1649.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1650.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2056.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3566","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/89757","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035721","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2959-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa123","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=5b814481f3573fa9677f3a31ee51322e2a22ee6a","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10160","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20160504-0001/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://source.android.com/security/bulletin/pixel/2017-11-01","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206903","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160503.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1648.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1649.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1650.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/89757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2959-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=5b814481f3573fa9677f3a31ee51322e2a22ee6a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20160504-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://source.android.com/security/bulletin/pixel/2017-11-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160503.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-2106","sourceIdentifier":"secalert@redhat.com","published":"2016-05-05T01:59:02.217","lastModified":"2026-06-17T00:43:26.783","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data."},{"lang":"es","value":"Desbordamiento de entero en la función EVP_EncryptUpdate en crypto/evp/evp_enc.c en OpenSSL en versiones anteriores a 1.0.1t y 1.0.2 en versiones anteriores a 1.0.2h permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria dinámica) a través de una gran cantidad de datos."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1s","matchCriteriaId":"C1F608A0-78BE-4F17-9E41-70933E52B3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"39A901D6-0874-46A4-92A8-5F72C7A89E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html","source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1648.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1649.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1650.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2056.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3566","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/89744","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035721","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2959-1","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa123","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=3f3582139fbb259a1c3cbb0a25236500a409bf26","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10160","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com"},{"url":"https://security.netapp.com/advisory/ntap-20160504-0001/","source":"secalert@redhat.com"},{"url":"https://source.android.com/security/bulletin/pixel/2017-11-01","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT206903","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160503.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1648.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1649.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1650.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/89744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2959-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=3f3582139fbb259a1c3cbb0a25236500a409bf26","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160504-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.android.com/security/bulletin/pixel/2017-11-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160503.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2107","sourceIdentifier":"secalert@redhat.com","published":"2016-05-05T01:59:03.200","lastModified":"2026-06-17T00:43:27.037","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169."},{"lang":"es","value":"La implementación de AES-NI en OpenSSL en versiones anteriores a 1.0.1t y 1.0.2 en versiones anteriores a 1.0.2h no considera la asignación de memoria durante una comprobación de relleno determinada, lo que permite a atacantes remotos obtener información de texto claro sensible a través de un ataque de padding-oracle contra una sesión AES CBC . NOTA: esta vulnerabilidad existe debido a una corrección incorrecta para CVE-2013-0169."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"39A901D6-0874-46A4-92A8-5F72C7A89E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","matchCriteriaId":"4863BE36-D16A-4D75-90D9-FD76DB5B48B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1s","matchCriteriaId":"C1F608A0-78BE-4F17-9E41-70933E52B3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:helion_openstack:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"46D566AF-D1DE-4EAD-B881-DC40D1DE780C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:helion_openstack:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"81BED703-422A-4937-8BF0-F83C248188F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:helion_openstack:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A241BABC-E6A8-43B1-BED6-77FC38E337BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:helion_openstack:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DBE8AEFE-C74B-4E24-8EBA-35207DE756E3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"0.10.0","versionEndExcluding":"0.10.45","matchCriteriaId":"1CBD1B3E-644C-42B4-A556-7A4C58D219D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"0.12.0","versionEndExcluding":"0.12.14","matchCriteriaId":"2E35B5D6-6D7B-4D04-A8E4-88C4C47270AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.4.4","matchCriteriaId":"BA51558F-F55C-48B3-870B-6D1225998AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.11.1","matchCriteriaId":"D8D63E80-A861-4393-A868-9845F521CD04"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5A53CB0E-3FBA-4796-BC81-6003A7DC29DE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","matchCriteriaId":"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX212736","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://web-in-security.blogspot.ca/2016/05/curious-padding-oracle-in-openssl-cve.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3566","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/89760","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035721","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2959-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://blog.cloudflare.com/yet-another-padding-oracle-in-openssl-cbc-ciphersuites/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa123","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=68595c0c2886e7942a14f98c17a55a88afb6c292","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03728en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10160","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20160504-0001/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206903","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/39768/","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160503.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.citrix.com/article/CTX212736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://web-in-security.blogspot.ca/2016/05/curious-padding-oracle-in-openssl-cve.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/89760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1035721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2959-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://blog.cloudflare.com/yet-another-padding-oracle-in-openssl-cbc-ciphersuites/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=68595c0c2886e7942a14f98c17a55a88afb6c292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03728en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20160504-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/39768/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160503.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-2108","sourceIdentifier":"secalert@redhat.com","published":"2016-05-05T01:59:04.230","lastModified":"2026-06-17T00:43:27.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the \"negative zero\" issue."},{"lang":"es","value":"La implementación ASN.1 en OpenSSL en versiones anteriores a 1.0.1o y 1.0.2 en versiones anteriores a 1.0.2c permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (desbordamiento inferior de buffer y corrupción de memoria) a través de un campo ANY en datos serializados manipulados, también conocido como el problema \"cero negativo\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1n","matchCriteriaId":"75251AA9-6304-4C01-A334-6F6CD045A497"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"39A901D6-0874-46A4-92A8-5F72C7A89E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html","source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2056.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com"},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"secalert@redhat.com"},{"url":"http://support.citrix.com/article/CTX212736","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3566","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/89752","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035721","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2959-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1137","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2017:0193","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2017:0194","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa123","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=3661bb4e7934668bd99ca777ea8b30eedfafa871","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=f5da52e308a6aeea6d5f3df98c4da295d7e9cc27","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05149345","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202","source":"secalert@redhat.com"},{"url":"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00067&languageid=en-fr","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com"},{"url":"https://security.netapp.com/advisory/ntap-20160504-0001/","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT206903","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160503.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://source.android.com/security/bulletin/2016-07-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/CTX212736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/89752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2959-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:0193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:0194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=3661bb4e7934668bd99ca777ea8b30eedfafa871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=f5da52e308a6aeea6d5f3df98c4da295d7e9cc27","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05149345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00067&languageid=en-fr","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160504-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160503.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2109","sourceIdentifier":"secalert@redhat.com","published":"2016-05-05T01:59:05.357","lastModified":"2026-06-17T00:43:27.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding."},{"lang":"es","value":"La función asn1_d2i_read_bio en crypto/asn1/a_d2i_fp.c en la implementación de ASN.1 BIO en OpenSSL en versiones anteriores a 1.0.1t y 1.0.2 en versiones anteriores a 1.0.2h permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de una codificación corta no válida."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1s","matchCriteriaId":"C1F608A0-78BE-4F17-9E41-70933E52B3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"39A901D6-0874-46A4-92A8-5F72C7A89E85"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"44B067C7-735E-43C9-9188-7E1522A02491"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html","source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2056.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2016/dsa-3566","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/87940","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035721","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2959-1","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa123","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c62981390d6cf9e3d612c489b8b77c2913b25807","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10160","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com"},{"url":"https://security.netapp.com/advisory/ntap-20160504-0001/","source":"secalert@redhat.com"},{"url":"https://source.android.com/security/bulletin/2017-07-01","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT206903","source":"secalert@redhat.com"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160503.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0996.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/87940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2959-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c62981390d6cf9e3d612c489b8b77c2913b25807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160504-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.android.com/security/bulletin/2017-07-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160503.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2176","sourceIdentifier":"secalert@redhat.com","published":"2016-05-05T01:59:06.340","lastModified":"2026-06-17T00:43:35.400","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data."},{"lang":"es","value":"La función X509_NAME_oneline en crypto/x509/x509_obj.c en OpenSSL en versiones anteriores a 1.0.1t y 1.0.2 en versiones anteriores a 1.0.2h permite a atacantes remotos obtener información sensible de la pila de memoria de proceso o provocar una denegación de servicio (sobrelectura de buffer) a través de datos EBCDIC ASN.1 manipulados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":4.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1s","matchCriteriaId":"C1F608A0-78BE-4F17-9E41-70933E52B3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/89746","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1035721","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa123","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=2919516136a4227d9e6d8f2fe66ef976aaf8c561","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202","source":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10160","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com"},{"url":"https://security.netapp.com/advisory/ntap-20160504-0001/","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT206903","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160503.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/89746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=2919516136a4227d9e6d8f2fe66ef976aaf8c561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20160504-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT206903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160503.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-18","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2461","sourceIdentifier":"security@android.com","published":"2016-05-09T10:59:39.500","lastModified":"2026-06-17T00:44:06.413","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles resets of the Additional Authenticated Data (AAD) array, which allows attackers to spoof message authentication via unspecified vectors, aka internal bugs 27324690 and 27696681."},{"lang":"es","value":"OpenSSLCipher.java en Conscrypt en Android 6.x en versiones anteriores a 2016-05-01 no maneja adecuadamente reseteos del array Additional Authenticated Data (AAD), lo que permite a atacantes suplantar la autenticación de mensaje a través de vectores no especificados, también conocido como errores internos 27324690 y 27696681."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","baseScore":7.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/external/conscrypt/+/1638945d4ed9403790962ec7abed1b7a232a9ff8","source":"security@android.com"},{"url":"https://android.googlesource.com/platform/external/conscrypt/+/50d0447566db4a77d78d592f1c1b5d31096fac8f","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/external/conscrypt/+/1638945d4ed9403790962ec7abed1b7a232a9ff8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://android.googlesource.com/platform/external/conscrypt/+/50d0447566db4a77d78d592f1c1b5d31096fac8f","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2462","sourceIdentifier":"security@android.com","published":"2016-05-09T10:59:40.643","lastModified":"2026-06-17T00:44:06.517","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSLCipher.java in Conscrypt in Android 6.x before 2016-05-01 mishandles updates of the Additional Authenticated Data (AAD) array, which allows attackers to spoof message authentication via unspecified vectors, aka internal bug 27371173."},{"lang":"es","value":"OpenSSLCipher.java en Conscrypt en Android 6.x en versiones anteriores a 2016-05-01 no maneja adecuadamente actualizaciones del array Additional Authenticated Data (AAD), lo que permite a atacantes suplantar la autenticación de mensaje a través de vectores no especificados, también conocido como error interno 27371173."}],"affected":[{"source":"security@android.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","baseScore":7.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295"},{"vulnerable":true,"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807"}]}]}],"references":[{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"security@android.com","tags":["Patch","Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/external/conscrypt/+/8bec47d2184fca7e8b7337d2a65b2b75a9bc8f54","source":"security@android.com"},{"url":"http://source.android.com/security/bulletin/2016-05-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://android.googlesource.com/platform/external/conscrypt/+/8bec47d2184fca7e8b7337d2a65b2b75a9bc8f54","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-8867","sourceIdentifier":"cve@mitre.org","published":"2016-05-22T01:59:06.710","lastModified":"2026-06-17T00:35:24.057","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 incorrectly relies on the deprecated RAND_pseudo_bytes function, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors."},{"lang":"es","value":"La función openssl_random_pseudo_bytes en ext/openssl/openssl.c en PHP en versiones anteriores a 5.4.44, 5.5.x en versiones anteriores a 5.5.28 y 5.6.x en versiones anteriores a 5.6.12 se basa incorrectamente en la función en desuso RAND_pseudo_bytes, lo que hace que sea más fácil para los atacantes remotos vencer a los mecanismos de protección de cifrado a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndExcluding":"5.4.44","matchCriteriaId":"BF8F876A-0871-49A0-859D-4481D60E6132"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndExcluding":"5.5.28","matchCriteriaId":"B9C0D35D-0789-471F-9252-FB4233D7E1F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"5.6.12","matchCriteriaId":"C946BEC6-918B-4C3F-9D2C-5FE90F693A2E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]}],"references":[{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=16023f3e3b9c06cf677c3c980e8d574e4c162827","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00056.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2750.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/24/1","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.php.net/ChangeLog-7.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2952-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2952-2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1534203","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugs.php.net/bug.php?id=70014","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=16023f3e3b9c06cf677c3c980e8d574e4c162827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2750.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/24/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.php.net/ChangeLog-7.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2952-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2952-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1534203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.php.net/bug.php?id=70014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-1902","sourceIdentifier":"cve@mitre.org","published":"2016-06-01T22:59:01.393","lastModified":"2026-06-17T00:42:49.743","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The nextBytes function in the SecureRandom class in Symfony before 2.3.37, 2.6.x before 2.6.13, and 2.7.x before 2.7.9 does not properly generate random numbers when used with PHP 5.x without the paragonie/random_compat library and the openssl_random_pseudo_bytes function fails, which makes it easier for attackers to defeat cryptographic protection mechanisms via unspecified vectors."},{"lang":"es","value":"La función nextBytes en la clase SecureRandom en Symfony en versiones anteriores a 2.3.37, 2.6.x en versiones anteriores a 2.6.13 y 2.7.x en versiones anteriores a 2.7.9 no genera correctamente números aleatorios cuando es usado con PHP 5.x sin la biblioteca paragonie/random_compat y falla la función openssl_random_pseudo_bytes, lo que hace más fácil a los atacantes vencer los mecanismos de protección de cifrado a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.36","matchCriteriaId":"87FE6482-55B8-4311-A67B-97C12626B3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"0F13A190-1F97-4D7B-826A-E976934AE82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"27770F28-584A-48E1-B885-6C6D17F546ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"3D52659E-1F0D-4319-A986-9BA512995C62"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"C177DF32-F356-483C-82E5-8FCC68D89A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"C6D9461C-A049-48EC-BB3E-FD3212C82795"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"0F7EF330-714D-42E4-A2CF-406B84F3945B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"2D86A4FF-9BD2-4B3D-A2CE-E9200A4EC690"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"5D6667BA-5A82-480B-AD9B-0E4CD0188458"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"7CFF0C34-4474-448B-8402-F9F7E6E1BA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"3EA6C319-AE4B-419F-BCAD-57D8ACF83EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"00E132C9-F809-4AD9-959B-FFA8CB92780D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"83BE3955-422A-4E81-9B81-4C2484E5C335"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.6.12:*:*:*:*:*:*:*","matchCriteriaId":"26EA6AA5-619A-4511-B2F6-4F1BA359FFC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"ABCF4EF8-5251-46B4-9B53-44783CD82082"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"A03AAA02-DB58-42C5-B4A6-C2608CDB7123"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"B7DA4FA9-AED8-4CCB-85E4-6D0BF6776FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"32021069-B447-40B2-BBF9-0D2CFDE8ECC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"38F01C2E-5A1B-441A-B58C-C450AA1C1410"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"660AA98C-4E93-4D8B-A4EC-A94E24DCDB9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"388F9E94-C2C1-4010-97DA-B008E89D500F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"2F89AEFB-7D2C-46EF-B0FF-D8C1B636EB30"},{"vulnerable":true,"criteria":"cpe:2.3:a:sensiolabs:symfony:2.7.8:*:*:*:*:*:*:*","matchCriteriaId":"DA6F1CF5-F8A5-43E2-B9C4-912A0583E558"}]}]}],"references":[{"url":"http://symfony.com/blog/cve-2016-1902-securerandom-s-fallback-not-secure-when-openssl-fails","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3588","source":"cve@mitre.org"},{"url":"https://github.com/symfony/symfony/pull/17359","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.landaire.net/blog/cve-2016-1902-symfony-securerandom/","source":"cve@mitre.org"},{"url":"http://symfony.com/blog/cve-2016-1902-securerandom-s-fallback-not-secure-when-openssl-fails","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/symfony/symfony/pull/17359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.landaire.net/blog/cve-2016-1902-symfony-securerandom/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2177","sourceIdentifier":"secalert@redhat.com","published":"2016-06-20T01:59:02.087","lastModified":"2026-06-17T00:43:35.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c."},{"lang":"es","value":"OpenSSL hasta la versión 1.0.2h no utiliza correctamente la aritmética de puntero para comprobaciones de límites de buffer de memoria dinámica, lo que podría permitir a atacantes remotos provocar una denegación de servicio (desbordamiento de entero y caída de aplicación) o posiblemente tener otro impacto no especificado aprovechando un comportamiento malloc no esperado, relacionado con s3_srvr.c, ssl_sess.c, y t1_lib.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_mcrp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C6AFB9DD-DA50-4F9D-B19D-160CA487D002"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:certd:*:*:*","matchCriteriaId":"87037877-8506-4737-9F47-2CB687975B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:dfw:*:*:*","matchCriteriaId":"FD94C478-6F81-4F37-B7F3-61D8682EC593"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_sso_agent_option:10.0:*:*:*:*:*:*:*","matchCriteriaId":"531FE660-C1A9-4C83-90BE-E38AA493D4F7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*","matchCriteriaId":"A491B32F-31F0-4151-AE9B-313CBF2C060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"0AF4953B-BB23-4C80-8C48-9E94EB234AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5:*:*:*:*:*:*:*","matchCriteriaId":"CE882C74-313C-47A9-9FA0-05F2CBF09D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1659.html","source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"secalert@redhat.com"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/9","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/540957/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/archive/1/540957/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91319","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036088","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3181-1","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2017:0193","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2017:0194","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2017:1658","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341705","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=a004e72b95835136d3f1ea90517f706c24c03da7","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03763en_us","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10165","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"secalert@redhat.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://support.f5.com/csp/article/K23873366","source":"secalert@redhat.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"secalert@redhat.com"},{"url":"https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager","source":"secalert@redhat.com"},{"url":"https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/","source":"secalert@redhat.com"},{"url":"https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1659.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/540957/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/archive/1/540957/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3181-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:0193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:0194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2017:1658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1341705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=a004e72b95835136d3f1ea90517f706c24c03da7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03763en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://support.f5.com/csp/article/K23873366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2178","sourceIdentifier":"secalert@redhat.com","published":"2016-06-20T01:59:03.023","lastModified":"2026-06-17T00:43:35.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack."},{"lang":"es","value":"La función dsa_sign_setup en crypto/dsa/dsa_ossl.c en OpenSSL hasta la versión 1.0.2h no asegura correctamente la utilización de operaciones de tiempo constante, lo que facilita a usuarios locales descubrir una clave privada DSA a través de un ataque de sincronización de canal lateral."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*","matchCriteriaId":"A491B32F-31F0-4151-AE9B-313CBF2C060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"0AF4953B-BB23-4C80-8C48-9E94EB234AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5:*:*:*:*:*:*:*","matchCriteriaId":"CE882C74-313C-47A9-9FA0-05F2CBF09D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","matchCriteriaId":"CBC8B78D-1131-4F21-919D-8AC79A410FB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"0.10.0","versionEndExcluding":"0.10.47","matchCriteriaId":"080F38F5-0A51-43BC-BC66-98545B31A0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"0.12.0","versionEndExcluding":"0.12.16","matchCriteriaId":"F90AAE35-9B46-4FEA-AF3A-5F28761EAC4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.6.0","matchCriteriaId":"303F780C-C971-4216-86D6-5026AAD56279"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"6.7.0","matchCriteriaId":"4A24A5C5-6ECC-46A8-B3E1-94D748FAB987"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","matchCriteriaId":"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"}]}]}],"references":[{"url":"http://eprint.iacr.org/2016/594.pdf","source":"secalert@redhat.com","tags":["Technical Description","Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1659.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/10","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/11","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/12","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/4","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/5","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/6","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/7","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/8","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/8","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91081","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036054","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0193","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0194","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1658","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343400","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=399944622df7bd81af62e67ea967c470534090e2","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.f5.com/csp/article/K53084033","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://eprint.iacr.org/2016/594.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Technical Description","Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2957.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1659.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/08/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/06/09/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/91081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=399944622df7bd81af62e67ea967c470534090e2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://support.f5.com/csp/article/K53084033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-3613","sourceIdentifier":"secalert_us@oracle.com","published":"2016-07-21T10:14:47.113","lastModified":"2026-06-17T00:46:04.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, and 5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to OpenSSL."},{"lang":"es","value":"Vulnerabilidad no especificada en el componente Oracle Secure Global Desktop en Oracle Virtualization 4.63, 4.71 y 5.2 permite a atacantes remotos afectar la confidencialidad, la integridad y la disponibilidad a través de vectores relacionados con OpenSSL."}],"affected":[{"source":"secalert_us@oracle.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T20:25:47.072115Z","id":"CVE-2016-3613","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_global_desktop:4.63:*:*:*:*:*:*:*","matchCriteriaId":"F27D9960-00E7-4261-850B-D417858F88A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_global_desktop:4.71:*:*:*:*:*:*:*","matchCriteriaId":"6E7F2CF7-CCB3-4EB7-AE44-637C12D97428"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_global_desktop:5.2:*:*:*:*:*:*:*","matchCriteriaId":"0F94A303-B4A1-4E65-B6C4-9A7E04DAED0C"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"secalert_us@oracle.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91856","source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1036391","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/91856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2180","sourceIdentifier":"secalert@redhat.com","published":"2016-08-01T02:59:11.120","lastModified":"2026-06-17T00:43:36.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the \"openssl ts\" command."},{"lang":"es","value":"La función TS_OBJ_print_bio en crypto/ts/ts_lib.c en la implementación X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) en OpenSSL hasta la versión 1.0.2h permite a atacantes remotos provocar una denegación de servicio (lectura fuera de rango y caída de la aplicación) a través de un archivo time-stamp manipulado que es manejado incorrectamente por el comando \"openssl ts\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*","matchCriteriaId":"A491B32F-31F0-4151-AE9B-313CBF2C060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"0AF4953B-BB23-4C80-8C48-9E94EB234AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92117","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036486","source":"secalert@redhat.com"},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359615","source":"secalert@redhat.com","tags":["Issue Tracking","Patch"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/commit/0ed26acce328ec16a3aa635f1ca37365e8c7403a","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1359615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/0ed26acce328ec16a3aa635f1ca37365e8c7403a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-5669","sourceIdentifier":"cret@cert.org","published":"2016-08-03T01:59:07.693","lastModified":"2026-06-17T00:49:50.627","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Crestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 use a hardcoded 0xb9eed4d955a59eb3 X.509 certificate from an OpenSSL Test Certification Authority, which makes it easier for remote attackers to conduct man-in-the-middle attacks against HTTPS sessions by leveraging the certificate's trust relationship."},{"lang":"es","value":"Dispositivos Crestron Electronics DM-TXRX-100-STR con firmware en versiones anteriores a 1.3039.00040 usa un certificado codificado 0xb9eed4d955a59eb3 X.509 de un OpenSSL Test Certification Authority, lo que facilita a atacantes remotos llevar a cabo ataques man-in-the-middle contra sesiones HTTPS mediante el aprovechamiento de la relación de confianza del certificado."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:crestron:dm-txrx-100-str_firmware:1.2866.00026:*:*:*:*:*:*:*","matchCriteriaId":"A1CDE355-7ED9-40EA-A13B-03D00E3263B1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:crestron:dm-txrx-100-str:-:*:*:*:*:*:*:*","matchCriteriaId":"D46F2C7B-856C-4AF2-ABC9-1E4CF7ED999C"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/974424","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92211","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/974424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/92211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/321.html\">CWE-321: Use of Hard-coded Cryptographic Key</a>"}},{"cve":{"id":"CVE-2016-2179","sourceIdentifier":"secalert@redhat.com","published":"2016-09-16T05:59:00.143","lastModified":"2026-06-17T00:43:36.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c."},{"lang":"es","value":"La implementación DTLS en OpenSSL en versiones anteriores a 1.1.0 no restringe adecuadamente la vida útil de entradas de cola asociadas con mensajes fuera de servicio no usados, lo que permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) manteniendo muchas sesiones DTLS manipuladas simultáneamente, relacionado con d1_lib.c, statem_dtls.c, statem_lib.c y statem_srvr.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*","matchCriteriaId":"A491B32F-31F0-4151-AE9B-313CBF2C060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"0AF4953B-BB23-4C80-8C48-9E94EB234AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92987","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036689","source":"secalert@redhat.com"},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=f5c7f5dfbaf0d2f7d946d0fe86f08e6bcb36ed0d","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"secalert@redhat.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1036689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=f5c7f5dfbaf0d2f7d946d0fe86f08e6bcb36ed0d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2181","sourceIdentifier":"secalert@redhat.com","published":"2016-09-16T05:59:01.347","lastModified":"2026-06-17T00:43:36.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c."},{"lang":"es","value":"La funcionalidad Anti-Replay en la implementación DTLS en OpenSSL en versiones anteriores a 1.1.0 no maneja adecuadamente el uso temprano de un número de época nuevo en conjunción con un número de secuencia larga, lo que permite a atacantes remotos provocar una denegación de servicio (gotas de paquetes falsos positivos) a través de registros DTLS suplantados, relacionado con rec_layer_d1.c y ssl3_record.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*","matchCriteriaId":"A491B32F-31F0-4151-AE9B-313CBF2C060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"0AF4953B-BB23-4C80-8C48-9E94EB234AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"secalert@redhat.com"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92982","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036690","source":"secalert@redhat.com"},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=1fb9fdc3027b27d8eb6a1e6a846435b070980770","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"secalert@redhat.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"secalert@redhat.com"},{"url":"https://support.f5.com/csp/article/K59298921","source":"secalert@redhat.com"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=1fb9fdc3027b27d8eb6a1e6a846435b070980770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K59298921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-2182","sourceIdentifier":"secalert@redhat.com","published":"2016-09-16T05:59:02.627","lastModified":"2026-06-17T00:43:36.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors."},{"lang":"es","value":"La función BN_bn2dec en crypto/bn/bn_print.c en OpenSSL en versiones anteriores a 1.1.0 no valida adecuadamente resultados de la división, lo que permite a atacantes remotos provocar una denegación de servicio (escritura fuera de límites y caída de la aplicación) o tener otro posible impacto no especificado a través de vectores desconocidos."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B3261B40-5CBE-4AA6-990A-0A7BE96E5518"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_mcrp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C6AFB9DD-DA50-4F9D-B19D-160CA487D002"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:certd:*:*:*","matchCriteriaId":"87037877-8506-4737-9F47-2CB687975B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:dfw:*:*:*","matchCriteriaId":"FD94C478-6F81-4F37-B7F3-61D8682EC593"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_sso_agent_option:10.0:*:*:*:*:*:*:*","matchCriteriaId":"531FE660-C1A9-4C83-90BE-E38AA493D4F7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*","matchCriteriaId":"A491B32F-31F0-4151-AE9B-313CBF2C060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"0AF4953B-BB23-4C80-8C48-9E94EB234AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:5:*:*:*:*:*:*:*","matchCriteriaId":"CE882C74-313C-47A9-9FA0-05F2CBF09D1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"secalert@redhat.com"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92557","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036688","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1037968","source":"secalert@redhat.com"},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=07bed46f332fce8c1d157689a2cdf915a982ae34","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10171","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"secalert@redhat.com"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"secalert@redhat.com"},{"url":"https://source.android.com/security/bulletin/2017-03-01","source":"secalert@redhat.com"},{"url":"https://source.android.com/security/bulletin/2017-03-01.html","source":"secalert@redhat.com"},{"url":"https://support.f5.com/csp/article/K01276005","source":"secalert@redhat.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1037968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=07bed46f332fce8c1d157689a2cdf915a982ae34","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.android.com/security/bulletin/2017-03-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.android.com/security/bulletin/2017-03-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K01276005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6302","sourceIdentifier":"secalert@redhat.com","published":"2016-09-16T05:59:12.003","lastModified":"2026-06-17T00:50:47.157","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short."},{"lang":"es","value":"La función tls_decrypt_ticket en ssl/t1_lib.c en OpenSSL en versiones anteriores a 1.1.0 no considera el tamaño HMAC durante la validación de la longitud del ticket, lo que permite a atacantes remotos provocar una denegación de servicio a través de un ticket que es muy corto."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*","matchCriteriaId":"A491B32F-31F0-4151-AE9B-313CBF2C060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"0AF4953B-BB23-4C80-8C48-9E94EB234AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","matchCriteriaId":"CC7A498A-A669-4C42-8134-86103C799D13"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","matchCriteriaId":"104DA87B-DEE4-4262-AE50-8E6BC43B228B"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*","matchCriteriaId":"79A602C5-61FE-47BA-9786-F045B6C6DBA8"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92628","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036885","source":"secalert@redhat.com"},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=e97763c92c655dcf4af2860b3abd2bc4c8a267f9","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=e97763c92c655dcf4af2860b3abd2bc4c8a267f9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6303","sourceIdentifier":"secalert@redhat.com","published":"2016-09-16T05:59:13.363","lastModified":"2026-06-17T00:50:47.307","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors."},{"lang":"es","value":"Desbordamiento de entero en la función MDC2_Update en crypto/mdc2/mdc2dgst.c en OpenSSL en versiones anteriores a 1.1.0 permite a atacantes remotos provocar una denegación de servicio (escritura fuera de límites y caída de aplicación) o tener otro posible impacto no especificado a través de vectores desconocidos."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionEndExcluding":"0.12.16","matchCriteriaId":"8AA619F9-88D2-4FF6-BCC4-320A2C332E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.6.0","matchCriteriaId":"4AC51255-7A8E-45C1-95F9-FC8A15500188"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.6.0","matchCriteriaId":"6A373B08-DC13-4524-9A9C-989684868C80"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*","matchCriteriaId":"A491B32F-31F0-4151-AE9B-313CBF2C060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"0AF4953B-BB23-4C80-8C48-9E94EB234AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92984","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036885","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370146","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=55d83bf7c10c7b205fffa23fa7c3977491e56c07","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=55d83bf7c10c7b205fffa23fa7c3977491e56c07","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6304","sourceIdentifier":"secalert@redhat.com","published":"2016-09-26T19:59:00.157","lastModified":"2026-06-17T00:50:47.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions."},{"lang":"es","value":"Múltiples fugas de memoria en t1_lib.c en OpenSSL en versiones anteriores a 1.0.1u, 1.0.2 en versiones anteriores a 1.0.2i y 1.1.0 en versiones anteriores a 1.1.0a permiten a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de grandes extensiones OCSP Status Request"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73104834-5810-48DD-9B97-549D223853F1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*","matchCriteriaId":"A491B32F-31F0-4151-AE9B-313CBF2C060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"0AF4953B-BB23-4C80-8C48-9E94EB234AAE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"0.10.0","versionEndExcluding":"0.10.47","matchCriteriaId":"080F38F5-0A51-43BC-BC66-98545B31A0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"0.12.0","versionEndExcluding":"0.12.16","matchCriteriaId":"F90AAE35-9B46-4FEA-AF3A-5F28761EAC4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.6.0","matchCriteriaId":"6B1DA9AA-EB7B-4CFB-A412-45309A41230C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.7.0","matchCriteriaId":"8291D42E-9E50-414D-9752-D70906D512B2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_web_scripting:12.0:*:*:*:*:*:*:*","matchCriteriaId":"F788DAEB-9865-45DE-B18A-FDD43E1EBB9D"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/139091/OpenSSL-x509-Parsing-Double-Free-Invalid-Free.html","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2802.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1415.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1659.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Dec/47","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Oct/62","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93150","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036878","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037640","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1413","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1414","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1658","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1801","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1802","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2493","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2494","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=2c0d295e26306e15a92eb23a84a1802005c1c137","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10171","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/139091/OpenSSL-x509-Parsing-Double-Free-Invalid-Free.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2802.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1415.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1659.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Dec/47","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2016/Oct/62","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.splunk.com/view/SP-CAAAPSV","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.splunk.com/view/SP-CAAAPUE","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=2c0d295e26306e15a92eb23a84a1802005c1c137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6305","sourceIdentifier":"secalert@redhat.com","published":"2016-09-26T19:59:01.597","lastModified":"2026-06-17T00:50:47.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call."},{"lang":"es","value":"La función ssl3_read_bytes en record/rec_layer_s3.c en OpenSSL 1.1.0 en versiones anteriores a 1.1.0a permite a atacantes remotos provocar una denegación de servicio (bucle infinito) desencadenando un registro de longitud cero en una llamada SSL_peek."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73104834-5810-48DD-9B97-549D223853F1"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/93149","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1036879","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=63658103d4441924f8dbfc517b99bb54758a98b9","source":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/issues/1563","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=63658103d4441924f8dbfc517b99bb54758a98b9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/issues/1563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6306","sourceIdentifier":"secalert@redhat.com","published":"2016-09-26T19:59:02.910","lastModified":"2026-06-17T00:50:47.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c."},{"lang":"es","value":"El analizador certificado en OpenSSL en versiones anteriores a 1.0.1u y 1.0.2 en versiones anteriores a 1.0.2i podría permitir a atacantes remotos provocar una denegación de servicio (lectura fuera de rango) a través de operaciones certificadas manipuladas, relacionado con s3_clnt.c y s3_srvr.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*","matchCriteriaId":"A491B32F-31F0-4151-AE9B-313CBF2C060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"0AF4953B-BB23-4C80-8C48-9E94EB234AAE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_federation_agent:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B3261B40-5CBE-4AA6-990A-0A7BE96E5518"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_mcrp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C6AFB9DD-DA50-4F9D-B19D-160CA487D002"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:certd:*:*:*","matchCriteriaId":"87037877-8506-4737-9F47-2CB687975B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:dfw:*:*:*","matchCriteriaId":"FD94C478-6F81-4F37-B7F3-61D8682EC593"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:icewall_sso_agent_option:10.0:*:*:*:*:*:*:*","matchCriteriaId":"531FE660-C1A9-4C83-90BE-E38AA493D4F7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_web_scripting:12.0:*:*:*:*:*:*:*","matchCriteriaId":"F788DAEB-9865-45DE-B18A-FDD43E1EBB9D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"0.10.0","versionEndExcluding":"0.10.47","matchCriteriaId":"080F38F5-0A51-43BC-BC66-98545B31A0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"0.12.0","versionEndExcluding":"0.12.16","matchCriteriaId":"F90AAE35-9B46-4FEA-AF3A-5F28761EAC4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.6.0","matchCriteriaId":"303F780C-C971-4216-86D6-5026AAD56279"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.12.0","matchCriteriaId":"121E5D5D-B4D9-43F3-B5C9-74590192FAF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.7.0","matchCriteriaId":"8291D42E-9E50-414D-9752-D70906D512B2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","matchCriteriaId":"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93153","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036885","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=52e623c4cb06fffa9d5e75c60b34b4bc130b12e9","source":"secalert@redhat.com"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/csp/article/K90492697","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1940.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2017/Jul/31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-3087-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-3087-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=52e623c4cb06fffa9d5e75c60b34b4bc130b12e9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/csp/article/K90492697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-6307","sourceIdentifier":"secalert@redhat.com","published":"2016-09-26T19:59:04.033","lastModified":"2026-06-17T00:50:48.060","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c."},{"lang":"es","value":"La implementación de máquina de estados en OpenSSL 1.1.0 en versiones anteriores a 1.1.0a asigna memoria antes de comprobar un exceso de longitud, lo que podría permitir a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de mensajes TLS manipulados, relacionado con statem/statem.c y statem/statem_lib.c."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73104834-5810-48DD-9B97-549D223853F1"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/93152","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1036885","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=4b390b6c3f8df925dc92a3dd6b022baa9a2f4650","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=4b390b6c3f8df925dc92a3dd6b022baa9a2f4650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6308","sourceIdentifier":"secalert@redhat.com","published":"2016-09-26T19:59:05.033","lastModified":"2026-06-17T00:50:48.180","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages."},{"lang":"es","value":"statem/statem_dtls.c en la implementación DTLS en OpenSSL 1.1.0 en versiones anteriores a 1.1.0a asigna memoria antes de comprobar el exceso de longitud, lo que podría permitir a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de mensajes DTLS manipulados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","baseScore":7.1,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73104834-5810-48DD-9B97-549D223853F1"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/93151","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1036885","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=df6b5e29ffea2d5a3e08de92fb765fdb21c7a21e","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=df6b5e29ffea2d5a3e08de92fb765fdb21c7a21e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160922.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-6309","sourceIdentifier":"secalert@redhat.com","published":"2016-09-26T19:59:06.393","lastModified":"2026-06-17T00:50:48.293","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or possibly execute arbitrary code via a crafted TLS session."},{"lang":"es","value":"statem/statem.c en OpenSSL 1.1.0a no considera el movimiento de bloque de memoria después de una llamada realloc, lo que permite a atacantes remotos provocar una denegación de servicio (uso después de liberación de memoria) o posiblemente ejecutar código arbitrario a través de una sesión TLS manipulada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*","matchCriteriaId":"C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/93177","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1036885","source":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=acacbfa7565c78d2273c0b2a2e5e803f44afefeb","source":"secalert@redhat.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv/20160926.txt","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com"},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/93177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1036885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=acacbfa7565c78d2273c0b2a2e5e803f44afefeb","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20160926.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7052","sourceIdentifier":"cve@mitre.org","published":"2016-09-26T19:59:07.533","lastModified":"2026-06-17T00:52:13.443","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation."},{"lang":"es","value":"crypto/x509/x509_vfy.c en OpenSSL 1.0.2i permite a atacantes remotos provocar una denegación de servicio (referencia a puntero NULL y caída de aplicación) desencadenando una operación CRL."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:suse_linux_enterprise_module_for_web_scripting:12.0:*:*:*:*:*:*:*","matchCriteriaId":"F788DAEB-9865-45DE-B18A-FDD43E1EBB9D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*","matchCriteriaId":"FDF148A3-1AA7-4F27-85AB-414C609C626F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.6.0","matchCriteriaId":"303F780C-C971-4216-86D6-5026AAD56279"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.7.0","matchCriteriaId":"8291D42E-9E50-414D-9752-D70906D512B2"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93171","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036885","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6e629b5be45face20b4ca71c4fcbfed78b864a2e","source":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10171","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:27.openssl.asc","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160926.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-19","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6e629b5be45face20b4ca71c4fcbfed78b864a2e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:27.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20160926.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-19","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-9015","sourceIdentifier":"cve@mitre.org","published":"2017-01-11T16:59:00.347","lastModified":"2026-06-17T00:55:17.957","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middle and information leakage attacks. This vulnerability affects users using versions 1.17 and 1.18 of the urllib3 library, who are using the optional PyOpenSSL support for TLS instead of the regular standard library TLS backend, and who are using OpenSSL 1.1.0 via PyOpenSSL. This is an extremely uncommon configuration, so the security impact of this vulnerability is low."},{"lang":"es","value":"Versiones 1.17 y 1.18 de la librería de Python urllib3 sufren una vulnerabilidad que puede provocarles, en ciertas configuraciones, que no validen correctamente certificados TLS. Esto coloca a usuarios de la librería con aquellas configuraciones en peligro de ataques man-in-the-middle y de filtración de información. Esta vulnerabilidad afecta a usuarios que utilizan versiones 1.17 y 1.18 de la librería urllib3, que están utilizando el soporte PyOpenSSL opcional para TLS en lugar del backend TLS regular de una librería estándar, y que están usando OpenSSL 1.1.0 a través de PyOpenSSL. Esta es una configuración extremadamente poco común, por lo que el impacto de seguridad de esta vulnerabilidad es bajo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:urllib3:1.17:*:*:*:*:*:*:*","matchCriteriaId":"0D13162D-373A-4872-B2DC-F7088DB878ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:python:urllib3:1.18:*:*:*:*:*:*:*","matchCriteriaId":"FF034AE6-0FE0-45DF-9DC6-E536337CF9D4"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/10/27/6","source":"cve@mitre.org","tags":["Mailing List","Mitigation"]},{"url":"http://www.securityfocus.com/bid/93941","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/27/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Mitigation"]},{"url":"http://www.securityfocus.com/bid/93941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2016-2217","sourceIdentifier":"cve@mitre.org","published":"2017-01-30T22:59:00.310","lastModified":"2026-06-17T00:43:41.460","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret."},{"lang":"es","value":"La implementación de direcciones OpenSSL en Socat 1.7.3.0 y 2.0.0-b8 no utiliza un número primo para el DH, lo que facilita a los atacantes remotos obtener el secreto compartido."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-320"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dest-unreach:socat:1.7.3.0:*:*:*:*:*:*:*","matchCriteriaId":"E2E98265-AE64-4C62-A138-370C7A30E39A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dest-unreach:socat:2.0.0:b8:*:*:*:*:*:*","matchCriteriaId":"6AFF8CA8-2FD9-48A9-B8BB-B1FE26D48865"}]}]}],"references":[{"url":"http://www.dest-unreach.org/socat/contrib/socat-secadv7.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/01/4","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/04/1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-23","source":"cve@mitre.org"},{"url":"http://www.dest-unreach.org/socat/contrib/socat-secadv7.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/01/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/04/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201612-23","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7798","sourceIdentifier":"cve@mitre.org","published":"2017-01-30T22:59:00.747","lastModified":"2026-06-17T00:53:31.003","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism."},{"lang":"es","value":"La openssl gem para Ruby utiliza el mismo vector de inicialización (IV) en el modo GCM (aes - * - gcm) cuando el IV se establece en versiones anteriores a la clave, lo que facilita que los atacantes dependiendo del contexto eludan el mecanismo de protección del cifrado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:openssl:*:*:*:*:*:ruby:*:*","versionEndExcluding":"2.0.0","matchCriteriaId":"5A99A902-22BC-4E8A-92CD-58A7ABA19A5E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/09/19/9","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/30/6","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/01/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93031","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/ruby/openssl/commit/8108e0a6db133f3375608303fdd2083eb5115062","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/ruby/openssl/issues/49","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-3966","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/19/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/30/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/01/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/ruby/openssl/commit/8108e0a6db133f3375608303fdd2083eb5115062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/ruby/openssl/issues/49","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-3966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2017-5681","sourceIdentifier":"secure@intel.com","published":"2017-03-07T18:59:00.170","lastModified":"2026-06-17T01:21:01.687","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The RSA-CRT implementation in the Intel QuickAssist Technology (QAT) Engine for OpenSSL versions prior to 0.5.19 may allow remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack."},{"lang":"es","value":"La implementación RSA-CRT en el motor Intel QuickAssist Technology (QAT) para OpenSSL versiones anteriores a 0.5.19 puede permitir a atacantes remotos obtener claves RSA privadas mediante la realización de un ataque de canal lateral Lenstra."}],"affected":[{"source":"secure@intel.com","affectedData":[{"vendor":"Intel","product":"Intel Quick Assist Technology","versions":[{"version":"Before v0.5.19","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intel:quickassist_technology_engine:0.5.18:*:*:*:*:*:*:*","matchCriteriaId":"CC2B9E98-E03D-4940-AFA0-41A8303510B2"}]}]}],"references":[{"url":"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00071&languageid=en-fr","source":"secure@intel.com","tags":["Patch","Vendor Advisory"]},{"url":"https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00071&languageid=en-fr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-7053","sourceIdentifier":"openssl-security@openssl.org","published":"2017-05-04T19:29:00.213","lastModified":"2026-06-17T00:52:13.633","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference. This is caused by a bug in the handling of the ASN.1 CHOICE type in OpenSSL 1.1.0 which can result in a NULL value being passed to the structure callback if an attempt is made to free certain invalid encodings. Only CHOICE structures using a callback which do not handle NULL value are affected."},{"lang":"es","value":"En OpenSSL 1.1.0 anterior a 1.1.0c, las aplicaciones que analizan estructuras CMS inválidas pueden dejar de dar servicio por una referencia a puntero nulo. Esto se produce por un fallo en la gestión del tipo ASN.1 CHOICE en OpenSSL 1.1.0, lo que puede derivar en que un valor NULL sea enviado a la devolución de la llamada si se intenta utilizar varias codificaciones inválidas. Sólo están afectadas estructuras CHOICE que utilicen una devolución de llamada que no gestione valores NULL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"openssl-1.1.0","status":"affected"},{"version":"openssl-1.1.0a","status":"affected"},{"version":"openssl-1.1.0b","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73104834-5810-48DD-9B97-549D223853F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*","matchCriteriaId":"C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"CFC70262-0DCD-4B46-9C96-FD18D0207511"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/94244","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037261","source":"openssl-security@openssl.org"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03744en_us","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20161110.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/94244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03744en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20161110.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-7054","sourceIdentifier":"openssl-security@openssl.org","published":"2017-05-04T19:29:00.257","lastModified":"2026-06-17T00:52:13.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS."},{"lang":"es","value":"En OpenSSL 1.1.0 anterior a 1.1.0c, las conexiones TLS que utilizan *-CHACHA20-POLY1305 ciphersuites pueden ser víctimas de una denegación de servicio si se corrompe el payload. Esto puede derivar la caída de OpenSSL. Este problema no se considera explotable más allá de una denegación de servicio."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"openssl-1.1.0","status":"affected"},{"version":"openssl-1.1.0a","status":"affected"},{"version":"openssl-1.1.0b","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73104834-5810-48DD-9B97-549D223853F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*","matchCriteriaId":"C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"CFC70262-0DCD-4B46-9C96-FD18D0207511"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/94238","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037261","source":"openssl-security@openssl.org"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03744en_us","source":"openssl-security@openssl.org"},{"url":"https://www.exploit-db.com/exploits/40899/","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20161110.txt","source":"openssl-security@openssl.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/94238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03744en_us","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40899/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20161110.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-3730","sourceIdentifier":"openssl-security@openssl.org","published":"2017-05-04T19:29:00.320","lastModified":"2026-06-17T01:18:48.153","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack."},{"lang":"es","value":"En OpenSSL versión 1.1.0 anterior a 1.1.0d, si un servidor malicioso suministra parámetros incorrectos para un intercambio de claves DHE o ECDHE, entonces esto puede resultar en que el cliente intente desreferenciar un puntero NULL que conduce a un bloqueo del cliente. Esto podría ser explotado en un ataque de denegación de servicio."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"openssl-1.1.0","status":"affected"},{"version":"openssl-1.1.0a","status":"affected"},{"version":"openssl-1.1.0b","status":"affected"},{"version":"openssl-1.1.0c","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73104834-5810-48DD-9B97-549D223853F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*","matchCriteriaId":"C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"CFC70262-0DCD-4B46-9C96-FD18D0207511"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0c:*:*:*:*:*:*:*","matchCriteriaId":"B2E07A34-08A0-4765-AF81-46A3BDC5648A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_engineering_data_management:6.1.3:*:*:*:*:*:*:*","matchCriteriaId":"61C5D278-11E5-4A2F-9860-6FFA579398CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:agile_engineering_data_management:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1B21D189-0E7D-4878-91A0-BE38A4ABA1FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_application_session_controller:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CC967A48-D834-4E9B-8CEC-057E7D5B8174"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_application_session_controller:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"F920CDE4-DF29-4611-93E9-A386C89EDB62"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.0:*:*:*:*:*:*:*","matchCriteriaId":"D195BC4C-DAC2-4C71-B83B-4149E86B5F42"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.1:*:*:*:*:*:*:*","matchCriteriaId":"996861FC-0089-4BED-8E46-F2B76037EA65"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.2:*:*:*:*:*:*:*","matchCriteriaId":"37764AF5-E42E-461E-AA43-763D21B3DCE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:*","matchCriteriaId":"D52F557F-D0A0-43D3-85F1-F10B6EBFAEDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_operations_monitor:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E3517A27-E6EE-497C-9996-F78171BBE90F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*","matchCriteriaId":"41684398-18A4-4DC6-B8A2-3EBAA0CBF9A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.1:*:*:*:*:*:*:*","matchCriteriaId":"B2ECA28E-E810-4D35-9151-FDBBBE069A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.2:*:*:*:*:*:*:*","matchCriteriaId":"FA144657-7598-46E2-AB0A-FD332EDECEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.3:*:*:*:*:*:*:*","matchCriteriaId":"83800E2F-804C-485D-A8FA-F4B32CDB4548"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*","matchCriteriaId":"0B1CAD50-749F-4ADB-A046-BF3585677A58"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/95812","source":"openssl-security@openssl.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037717","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/openssl/openssl/commit/efbe126e3ebb9123ac9d058aa2bb044261342aaa","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201702-07","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_us","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/41192/","source":"openssl-security@openssl.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.openssl.org/news/secadv/20170126.txt","source":"openssl-security@openssl.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/95812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/openssl/openssl/commit/efbe126e3ebb9123ac9d058aa2bb044261342aaa","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201702-07","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/41192/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.openssl.org/news/secadv/20170126.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2017-3731","sourceIdentifier":"openssl-security@openssl.org","published":"2017-05-04T19:29:00.353","lastModified":"2026-06-17T01:18:48.320","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k."},{"lang":"es","value":"Si un servidor o cliente SSL/TLS se ejecuta en un host de 32 bits y se utiliza un cifrador específico, un paquete truncado puede dar lugar a que el servidor o el cliente realicen una lectura fuera de límites que, normalmente, provoca un cierre inesperado En OpenSSL 1.1.0, el cierre inesperado se puede desencadenar cuando se usa CHACHA20/POLY1305"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"openssl-1.1.0","status":"affected"},{"version":"openssl-1.1.0a","status":"affected"},{"version":"openssl-1.1.0b","status":"affected"},{"version":"openssl-1.1.0c","status":"affected"},{"version":"openssl-1.0.2","status":"affected"},{"version":"openssl-1.0.2a","status":"affected"},{"version":"openssl-1.0.2b","status":"affected"},{"version":"openssl-1.0.2c","status":"affected"},{"version":"openssl-1.0.2d","status":"affected"},{"version":"openssl-1.0.2e","status":"affected"},{"version":"openssl-1.0.2f","status":"affected"},{"version":"openssl-1.0.2g","status":"affected"},{"version":"openssl-1.0.2h","status":"affected"},{"version":"openssl-1.0.2i","status":"affected"},{"version":"openssl-1.0.2j","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*","matchCriteriaId":"C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"CFC70262-0DCD-4B46-9C96-FD18D0207511"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0c:*:*:*:*:*:*:*","matchCriteriaId":"B2E07A34-08A0-4765-AF81-46A3BDC5648A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*","matchCriteriaId":"FDF148A3-1AA7-4F27-85AB-414C609C626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*","matchCriteriaId":"E15B749E-6808-4788-AE42-7A1587D8697E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.7.3","matchCriteriaId":"934083EB-2961-49FF-B8D7-B870D1FA3CB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.12.0","matchCriteriaId":"121E5D5D-B4D9-43F3-B5C9-74590192FAF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.8.1","matchCriteriaId":"D107EC29-67E7-40C3-8E5A-324C9105C5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"6.9.0","versionEndExcluding":"6.9.5","matchCriteriaId":"14346EBC-1890-472B-B236-06FE381229EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.5.0","matchCriteriaId":"2EE58CC5-2E12-4DA9-8AF2-9739CE393008"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2017-0286.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3773","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/95813","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037717","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://github.com/openssl/openssl/commit/00d965474b22b54e4275232bc71ee0c699c5cd21","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:02.openssl.asc","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201702-07","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171019-0002/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.paloaltonetworks.com/CVE-2017-3731","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://source.android.com/security/bulletin/pixel/2017-11-01","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_us","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20170126.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2017-04","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0286.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/95813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/openssl/openssl/commit/00d965474b22b54e4275232bc71ee0c699c5cd21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:02.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201702-07","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171019-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.paloaltonetworks.com/CVE-2017-3731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://source.android.com/security/bulletin/pixel/2017-11-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20170126.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2017-04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2017-3732","sourceIdentifier":"openssl-security@openssl.org","published":"2017-05-04T19:29:00.400","lastModified":"2026-06-17T01:18:48.547","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem."},{"lang":"es","value":"Hay un error de propagación de dígito (carry propagation) en el procedimiento de elevación al cuadrado de Montgomery x86_64 en OpenSSL versiones 1.0.2 anteriores a la 1.0.2k y versiones 1.1.0 anteriores a la 1.1.0d. Ningún algoritmo de curva elíptica (EC) se ve afectado. El análisis sugiere que los ataques contra RSA y DSA que se realizan como resultado de este defecto serían muy difíciles de realizar y no muy probables. Los ataques contra DH se consideran factibles (aunque muy difíciles) ya que la mayoría del trabajo necesario para deducir información sobre una clave privada se puede realizar sin conexión La cantidad de recursos requeridos para este tipo de ataque sería muy significativa y, probablemente, solo estaría accesible para un número limitado de atacantes. Un atacante podría necesitar, además, acceso a un sistema sin parches que utilice la clave privada del objetivo en un escenario con parámetros DH persistentes y una clave privada que se comparte entre múltiples clientes. Por ejemplo, esto puede ocurrir por defecto en las suites de cifrado SSL/TLS basadas en DHE de OpenSSL. Nota: Este problema es muy similar a CVE-2015-3193, pero debe tratarse como un problema separado."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"openssl-1.1.0","status":"affected"},{"version":"openssl-1.1.0a","status":"affected"},{"version":"openssl-1.1.0b","status":"affected"},{"version":"openssl-1.1.0c","status":"affected"},{"version":"openssl-1.0.2","status":"affected"},{"version":"openssl-1.0.2a","status":"affected"},{"version":"openssl-1.0.2b","status":"affected"},{"version":"openssl-1.0.2c","status":"affected"},{"version":"openssl-1.0.2d","status":"affected"},{"version":"openssl-1.0.2e","status":"affected"},{"version":"openssl-1.0.2f","status":"affected"},{"version":"openssl-1.0.2g","status":"affected"},{"version":"openssl-1.0.2h","status":"affected"},{"version":"openssl-1.0.2i","status":"affected"},{"version":"openssl-1.0.2j","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*","matchCriteriaId":"FDF148A3-1AA7-4F27-85AB-414C609C626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*","matchCriteriaId":"C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"CFC70262-0DCD-4B46-9C96-FD18D0207511"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0c:*:*:*:*:*:*:*","matchCriteriaId":"B2E07A34-08A0-4765-AF81-46A3BDC5648A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.7.3","matchCriteriaId":"934083EB-2961-49FF-B8D7-B870D1FA3CB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.12.0","matchCriteriaId":"121E5D5D-B4D9-43F3-B5C9-74590192FAF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.8.1","matchCriteriaId":"D107EC29-67E7-40C3-8E5A-324C9105C5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"6.9.0","versionEndExcluding":"6.9.5","matchCriteriaId":"14346EBC-1890-472B-B236-06FE381229EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.5.0","matchCriteriaId":"2EE58CC5-2E12-4DA9-8AF2-9739CE393008"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/95814","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037717","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2568","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2575","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2713","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://github.com/openssl/openssl/commit/a59b90bf491410f1f2bc4540cc21f1980fd14c5b","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:02.openssl.asc","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201702-07","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_us","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20170126.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2017-04","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/95814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/openssl/openssl/commit/a59b90bf491410f1f2bc4540cc21f1980fd14c5b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:02.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201702-07","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20170126.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2017-04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2017-3733","sourceIdentifier":"openssl-security@openssl.org","published":"2017-05-04T19:29:00.430","lastModified":"2026-06-17T01:18:48.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 before 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected."},{"lang":"es","value":"Durante un protocolo de enlace de renegociación, si la extensión Encrypt-Then-Mac es negociada cuando no estaba en el protocolo de enlace original (o viceversa), se podría provocar el cierre inesperado de OpenSSL (dependiente de una suite de cifrado) en versiones 1.1.0 anteriores a la 1.1.0e. Tanto los clientes como los servidores se ven afectados."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"openssl-1.1.0","status":"affected"},{"version":"openssl-1.1.0a","status":"affected"},{"version":"openssl-1.1.0b","status":"affected"},{"version":"openssl-1.1.0c","status":"affected"},{"version":"openssl-1.1.0d","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73104834-5810-48DD-9B97-549D223853F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*","matchCriteriaId":"C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"CFC70262-0DCD-4B46-9C96-FD18D0207511"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0c:*:*:*:*:*:*:*","matchCriteriaId":"B2E07A34-08A0-4765-AF81-46A3BDC5648A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0d:*:*:*:*:*:*:*","matchCriteriaId":"83B0A3D8-60C7-4F42-9DD6-C535F983D98B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:operations_agent:11.14:*:*:*:*:*:*:*","matchCriteriaId":"739CE0EF-9D08-4A26-A82A-A117DBBF0717"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:operations_agent:11.15:*:*:*:*:*:*:*","matchCriteriaId":"3429CA31-3B98-4227-8FB5-A56CAFFD641E"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"openssl-security@openssl.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"openssl-security@openssl.org"},{"url":"http://www.securityfocus.com/bid/96269","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037846","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/4ad93618d26a3ea23d36ad5498ff4f59eff3a4d2","source":"openssl-security@openssl.org"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03728en_us","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.openssl.org/news/secadv/20170216.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"openssl-security@openssl.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/96269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/4ad93618d26a3ea23d36ad5498ff4f59eff3a4d2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03728en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.openssl.org/news/secadv/20170216.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-7055","sourceIdentifier":"cve@mitre.org","published":"2017-05-04T20:29:00.167","lastModified":"2026-06-17T00:52:14.023","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine in question is not used in operations with the private key itself and an input of the attacker's direct choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or reproducible erroneous outcome of public-key operations with specially crafted input. Among EC algorithms only Brainpool P-512 curves are affected and one presumably can attack ECDH key negotiation. Impact was not analyzed in detail, because pre-requisites for attack are considered unlikely. Namely multiple clients have to choose the curve in question and the server has to share the private key among them, neither of which is default behaviour. Even then only clients that chose the curve will be affected."},{"lang":"es","value":"Existe un error de propagación de acarreo en el procedimiento de multiplicación Montgomery Broadwell-specific en OpenSSL 1.0.2 y 1.1.0 en versiones anteriores a la 1.1.0c, que maneja longitudes de entrada divisibles por, pero más largas que 256 bits. El análisis sugiere que los ataques contra las claves privadas RSA, DSA y DH son imposibles. Esto se debe a que dicha subrutina no se utiliza en operaciones con la clave privada y una entrada elegida directamente por el atacante. En caso contrario, el error puede manifestarse como una autenticación transitoria o con errores en la negociación de claves o en un resultado erróneo reproducible en operaciones de clave pública a través de una entrada especialmente diseñada. Entre los algoritmos de Curva Eliptica solo los Brainpool P-512 están afectados y presumiblemente puede atacarse la negociación de claves ECDH. El impacto no se analizó en detalle, ya que los requisitos previos para el ataque se consideran improbables. Notese que varios clientes tienen que elegir la curva en cuestión y el servidor tiene que compartir la clave privada entre ellos, lo que no es un comportamiento por defecto en ningún caso. Incluso en esa situación, sólo los clientes que eligieron la curva se verán afectados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","baseScore":2.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2k","matchCriteriaId":"5CE633C2-8643-4674-B321-0F11F5FD3EC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndExcluding":"1.1.0c","matchCriteriaId":"88B53681-5AB9-4081-8285-D8F6A82008C6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.7.3","matchCriteriaId":"934083EB-2961-49FF-B8D7-B870D1FA3CB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.8.1","matchCriteriaId":"D107EC29-67E7-40C3-8E5A-324C9105C5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"6.9.0","versionEndExcluding":"6.9.5","matchCriteriaId":"14346EBC-1890-472B-B236-06FE381229EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.5.0","matchCriteriaId":"2EE58CC5-2E12-4DA9-8AF2-9739CE393008"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/94242","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037261","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03752en_us","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03744en_us","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:02.openssl.asc","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201702-07","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20161110.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2017-04","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/94242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03752en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03744en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:02.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201702-07","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20161110.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2017-04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2017-11144","sourceIdentifier":"cve@mitre.org","published":"2017-07-10T14:29:00.620","lastModified":"2026-06-17T01:01:17.970","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission."},{"lang":"es","value":"En PHP, en versiones anteriores a la 5.6.31, las versiones 7.x anteriores a la 7.0.21 y las versiones 7.1.x anteriores a la 7.1.7, el código de sellado PEM de la extensión openssl no comprobó el valor de retorno de la función de sellado de OpenSSL, lo que podría conducir al cierre inesperado del intérprete de PHP. Esto está relacionado con un conflicto de interpretación para un número negativo en ext/openssl/openssl.c y una omisión de documentación OpenSSL."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-754"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.30","matchCriteriaId":"399EA21A-9B46-4F4F-9A33-4DC557B11743"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DB6890AF-8A0A-46EE-AAD5-CF9AAE14A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6B90B947-7B54-47F3-9637-2F4AC44079EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"35848414-BD5D-4164-84DC-61ABBB1C4152"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2B1F8402-8551-4F66-A9A7-81D472AB058E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7A773E8E-48CD-4D35-A0FD-629BD9334486"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FC492340-79AF-4676-A161-079A97EC6F0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"F1C2D8FE-C380-4B43-B634-A3DBA4700A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"3EB58393-0C10-413C-8D95-6BAA8BC19A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*","matchCriteriaId":"751F51CA-9D88-4971-A6EC-8C0B72E8E22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*","matchCriteriaId":"37B74118-8FC2-44CB-9673-A83DF777B2E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*","matchCriteriaId":"4D56A200-1477-40DA-9444-CFC946157C69"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*","matchCriteriaId":"FD0D1CCC-A857-4C15-899E-08F9255CEE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*","matchCriteriaId":"6745CC43-2836-4CD8-848F-EEA08AE9D5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.13:*:*:*:*:*:*:*","matchCriteriaId":"7BEB6696-14F9-4D9B-9974-B682FFBB828E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.14:*:*:*:*:*:*:*","matchCriteriaId":"04146390-021D-4147-9830-9EAA90D120A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.15:*:*:*:*:*:*:*","matchCriteriaId":"5B124547-DC1D-4A92-B8AB-8A1900063786"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.16:*:*:*:*:*:*:*","matchCriteriaId":"F45B2127-CF3D-4D59-9042-AE6DF2908319"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.17:*:*:*:*:*:*:*","matchCriteriaId":"29A450E3-931F-4487-A76D-80A38210297A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.18:*:*:*:*:*:*:*","matchCriteriaId":"C099A0C4-883D-42ED-8359-FFD3ADD692A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.19:*:*:*:*:*:*:*","matchCriteriaId":"ABD07432-5A23-491E-892E-42F0F58307D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.0.20:*:*:*:*:*:*:*","matchCriteriaId":"19627ECC-9342-4917-8FCC-7757339E3242"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0C68AA43-ED90-4B98-A5F8-4E210C2CC7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2466D297-9442-40B0-A1A7-F9D166396CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"EADBF7EE-18DC-49F9-BF2F-A09BBAE76F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"1726E9B6-A7FA-402B-A911-0CE81C623087"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"C3670FF7-2CA3-41A4-92FE-0123497E4E87"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.1.5:*:*:*:*:*:*:*","matchCriteriaId":"1C22CE03-DFE5-4CD3-B229-10B219A55434"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:7.1.6:*:*:*:*:*:*:*","matchCriteriaId":"C258AF27-84DF-4FC3-A651-1349BB567FB9"}]}]}],"references":[{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=73cabfedf519298e1a11192699f44d53c529315e","source":"cve@mitre.org"},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=89637c6b41b510c20d262c17483f582f115c66d6","source":"cve@mitre.org"},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=91826a311dd37f4c4e5d605fa7af331e80ddd4c3","source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2017/07/10/6","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://php.net/ChangeLog-5.php","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://php.net/ChangeLog-7.php","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1296","source":"cve@mitre.org"},{"url":"https://bugs.php.net/bug.php?id=74651","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180112-0001/","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2018/dsa-4080","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2018/dsa-4081","source":"cve@mitre.org"},{"url":"https://www.tenable.com/security/tns-2017-12","source":"cve@mitre.org"},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=73cabfedf519298e1a11192699f44d53c529315e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=89637c6b41b510c20d262c17483f582f115c66d6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=91826a311dd37f4c4e5d605fa7af331e80ddd4c3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2017/07/10/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://php.net/ChangeLog-5.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://php.net/ChangeLog-7.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.php.net/bug.php?id=74651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180112-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2018/dsa-4080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2018/dsa-4081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2017-12","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2017-3735","sourceIdentifier":"openssl-security@openssl.org","published":"2017-08-28T19:29:01.353","lastModified":"2026-06-17T01:18:48.940","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g."},{"lang":"es","value":"Al analizar una extensión IPAddressFamily en un certificado X.509, es posible realizar una sobrelectura de un bit. Esto tendría como resultado que el texto del certificado se muestre de forma incorrecta. Este error ha existido desde 2006 y está presente en todas las versiones de OpenSSL anteriores a la 1.0.2m y 1.1.0g."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL Software Foundation","product":"OpenSSL","versions":[{"version":"1.1.0","status":"affected"},{"version":"1.0.2","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","matchCriteriaId":"382C1679-DA1D-4FA4-9D5E-B86CC5052D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","matchCriteriaId":"1CA28812-8A24-4FE1-BED9-D6D5BB023645"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","matchCriteriaId":"9894D83E-2A27-446E-8B47-9C03CF802A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","matchCriteriaId":"55A9AC4D-E19B-431F-8679-B62F5F46BCF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","matchCriteriaId":"AF4EA988-FC80-4170-8933-7C6663731981"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","matchCriteriaId":"64F8F53B-24A1-4877-B16E-F1917C4E4E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","matchCriteriaId":"75D3ACD5-905F-42BB-BE1A-8382E9D823BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","matchCriteriaId":"766EA6F2-7FA4-4713-9859-9971CCD2FDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","matchCriteriaId":"EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","matchCriteriaId":"2BB38AEA-BAF0-4920-9A71-747C24444770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","matchCriteriaId":"1F33EA2B-DE15-4695-A383-7A337AC38908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","matchCriteriaId":"261EE631-AB43-44FE-B02A-DFAAB8D35927"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","matchCriteriaId":"FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","matchCriteriaId":"1A1365ED-4651-4AB2-A64B-43782EA2F0E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","matchCriteriaId":"EC82690C-DCED-47BA-AA93-4D0C9E95B806"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","matchCriteriaId":"43B90ED1-DAB4-4239-8AD8-87E8D568D5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","matchCriteriaId":"3C9BF2DD-85EF-49CF-8D83-0DB46449E333"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","matchCriteriaId":"6AEBE689-3952-46F0-BACA-BB03041C6D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","matchCriteriaId":"86C46AB8-52E5-4385-9C5C-F63FF9DB82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","matchCriteriaId":"564AA4E7-223E-48D8-B3E0-A461969CF530"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","matchCriteriaId":"A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","matchCriteriaId":"35C2AE06-B6E8-41C4-BB60-177AC4819CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","matchCriteriaId":"EB15C1F3-0DE8-4A50-B17C-618ECA58AABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","matchCriteriaId":"45491BD3-7C62-4422-B7DA-CB2741890FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*","matchCriteriaId":"499E52F3-4B34-4C47-8ABF-292928EBAA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*","matchCriteriaId":"D530BE19-ADCF-4B5C-99E0-2B9A1DE7717F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*","matchCriteriaId":"A7540155-3629-4C76-9C67-8A8E0C1067F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*","matchCriteriaId":"419BBCCD-6F8A-418A-BA02-56267B11D948"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*","matchCriteriaId":"8A3A2AF8-C7DD-43D0-B03F-37E7EB735C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8y:*:*:*:*:*:*:*","matchCriteriaId":"DC142ACF-3CBD-4F96-B2AA-C7D48E7CF31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8z:*:*:*:*:*:*:*","matchCriteriaId":"A6B4D332-3CB7-4C57-A689-ED0894659ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8za:*:*:*:*:*:*:*","matchCriteriaId":"EB130295-F27C-45DD-80F6-BE4BB0931C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8zb:*:*:*:*:*:*:*","matchCriteriaId":"CFA6F5C9-9EE6-40FA-AA99-B4C7274BE8EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8zc:*:*:*:*:*:*:*","matchCriteriaId":"6626FDA4-82B2-412E-8282-7031E53F020B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8ze:*:*:*:*:*:*:*","matchCriteriaId":"63DB3BC8-C87B-4937-BB97-4BE7BCF525CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8zg:*:*:*:*:*:*:*","matchCriteriaId":"0ACAA671-BDC0-42F4-9AB5-CF19F50AF101"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2FBD8C92-6138-4274-ACBA-D7D42DAEC5AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"3A2075BD-6102-4B0F-839A-836E9585F43B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"2A2FA09E-2BF7-4968-B62D-00DA57F81EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F02E634E-1E3D-4E44-BADA-76F92483A732"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"FCC2B07A-49EF-411F-8A4D-89435E22B043"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7E9480D6-3B6A-4C41-B8C1-C3F945040772"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","matchCriteriaId":"10FF0A06-DA61-4250-B083-67E55E362677"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A6BA453-C150-4159-B80B-5465EFF83F11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","matchCriteriaId":"638A2E69-8AB6-4FEA-852A-FEF16A500C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","matchCriteriaId":"56C47D3A-B99D-401D-B6B8-1194B2DB4809"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","matchCriteriaId":"08355B10-E004-4BE6-A5AE-4D428810580B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","matchCriteriaId":"738BCFDC-1C49-4774-95AE-E099F707DEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","matchCriteriaId":"D4B242C0-D27D-4644-AD19-5ACB853C9DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","matchCriteriaId":"8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","matchCriteriaId":"764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","matchCriteriaId":"6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","matchCriteriaId":"132B9217-B0E0-4E3E-9096-162AA28E158E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","matchCriteriaId":"7619F9A0-9054-4217-93D1-3EA64876C5B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","matchCriteriaId":"6D82C405-17E2-4DF1-8DF5-315BD5A41595"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","matchCriteriaId":"4C96806F-4718-4BD3-9102-55A26AA86498"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","matchCriteriaId":"8A16CD99-AF7F-4931-AD2E-77727BA18FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","matchCriteriaId":"88440697-754A-47A7-BF83-4D0EB68FFB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","matchCriteriaId":"AD51F0FC-F426-4AE5-B3B9-B813C580EBAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0r:*:*:*:*:*:*:*","matchCriteriaId":"38721148-F24A-4339-8282-BC2DD9553512"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.0s:*:*:*:*:*:*:*","matchCriteriaId":"48CE49C8-0672-46A0-BCD0-C0E62801444E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","matchCriteriaId":"21F16D65-8A46-4AC7-8970-73AB700035FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","matchCriteriaId":"92F393FF-7E6F-4671-BFBF-060162E12659"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","matchCriteriaId":"E1B85A09-CF8D-409D-966E-168F9959F6F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*","matchCriteriaId":"FDF148A3-1AA7-4F27-85AB-414C609C626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*","matchCriteriaId":"E15B749E-6808-4788-AE42-7A1587D8697E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2k:*:*:*:*:*:*:*","matchCriteriaId":"58F80C8D-BCA2-40AD-BD22-B70C7BE1B298"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2l:*:*:*:*:*:*:*","matchCriteriaId":"70B78EDF-6BB7-42C4-9423-9332C62C6E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73104834-5810-48DD-9B97-549D223853F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*","matchCriteriaId":"C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"CFC70262-0DCD-4B46-9C96-FD18D0207511"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0c:*:*:*:*:*:*:*","matchCriteriaId":"B2E07A34-08A0-4765-AF81-46A3BDC5648A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0d:*:*:*:*:*:*:*","matchCriteriaId":"83B0A3D8-60C7-4F42-9DD6-C535F983D98B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0e:*:*:*:*:*:*:*","matchCriteriaId":"CD08E859-BB6D-4909-A873-C2609FA2821A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0f:*:*:*:*:*:*:*","matchCriteriaId":"C2BF7D67-EAF4-4D01-9185-0DB69F2C543B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"openssl-security@openssl.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"openssl-security@openssl.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"openssl-security@openssl.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"openssl-security@openssl.org"},{"url":"http://www.securityfocus.com/bid/100515","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039726","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3221","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:3505","source":"openssl-security@openssl.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822","source":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html","source":"openssl-security@openssl.org"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/201712-03","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20170927-0001/","source":"openssl-security@openssl.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171107-0002/","source":"openssl-security@openssl.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://support.apple.com/HT208331","source":"openssl-security@openssl.org"},{"url":"https://usn.ubuntu.com/3611-2/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2017/dsa-4017","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-4018","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20170828.txt","source":"openssl-security@openssl.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.openssl.org/news/secadv/20171102.txt","source":"openssl-security@openssl.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2017-14","source":"openssl-security@openssl.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2017-15","source":"openssl-security@openssl.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/100515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201712-03","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20170927-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171107-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://support.apple.com/HT208331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/3611-2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2017/dsa-4017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-4018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20170828.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.openssl.org/news/secadv/20171102.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2017-14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2017-15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2017-14033","sourceIdentifier":"cve@mitre.org","published":"2017-09-19T17:29:00.327","lastModified":"2026-06-17T01:05:28.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service (interpreter crash) via a crafted string."},{"lang":"es","value":"El método decode en el módulo OpenSSL::ASN1 en Ruby en versiones anteriores a la 2.2.8, versiones 2.3.x anteriores a 2.3.5, y 2.4.x hasta la 2.4.1 permite que los atacantes provoquen una denegación de servicio (cierre inesperado del intérprete) mediante una string manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B8F103B7-0E70-4490-9802-2CD6034E240B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.2.0:preview1:*:*:*:*:*:*","matchCriteriaId":"C0232F9E-8AA2-4BE3-B967-A83692579CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.2.0:preview2:*:*:*:*:*:*","matchCriteriaId":"6C13ED3C-5F26-4249-8FB4-6714B2E0D767"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.2.0:rc1:*:*:*:*:*:*","matchCriteriaId":"7B2AFFD9-DFF5-444F-81B9-51EEF69DF1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"35D36707-03B7-437C-B21D-A27D5C530117"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5FCCD8F3-E667-42F2-9861-14EDFB16583A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6F3CEF46-C95D-493B-A99B-7C90FDF27B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1629D696-BD68-4C4F-B6CE-885AD670A12A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"F87B9AD8-CF70-4CA9-A655-838B1D7AD056"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"EB471265-C399-49D4-8CA2-5FC1C85C6F19"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"E8F7FF5E-EBD0-415E-BFA1-6AF1527F1174"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"822307DD-7F7D-44C2-9C4B-CB8704663410"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.3.0:preview1:*:*:*:*:*:*","matchCriteriaId":"A2D62AC9-83B8-4C84-A47E-2B06C2816964"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.3.0:preview2:*:*:*:*:*:*","matchCriteriaId":"E583E49C-95B1-4AE4-AA7A-6D6BA7D470B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5F197C5A-2588-417F-A743-E72D1E8EF4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FBA01BF1-91AD-4968-9AC2-A194FCD6AB76"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B36CCD91-2A20-4C2E-96D5-73704DFC10E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"485C401C-CC3B-4A74-82D6-F4539FFE48B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F9E99F5A-E693-43E9-8AB3-A3FCB21BCF14"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.4.0:preview1:*:*:*:*:*:*","matchCriteriaId":"9DDA92E9-C9CF-47B9-B647-0202D493D057"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.4.0:preview2:*:*:*:*:*:*","matchCriteriaId":"A682A487-A615-404C-A7D9-A28C0C31B4E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.4.0:preview3:*:*:*:*:*:*","matchCriteriaId":"8930BA64-E9BC-42E0-9D74-8FA2ABD1F692"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A87AE96A-F7FB-41A2-943C-DFAEA6D81446"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"946D2AB0-D334-4D94-BDA2-733BFC6C9E1E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/100868","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039363","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1042004","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:0378","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:0583","source":"cve@mitre.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:0585","source":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201710-18","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2017/dsa-4031","source":"cve@mitre.org"},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/openssl-asn1-buffer-underrun-cve-2017-14033/","source":"cve@mitre.org","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/","source":"cve@mitre.org","tags":["Patch","Release Notes","Vendor Advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/","source":"cve@mitre.org","tags":["Patch","Release Notes","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/100868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1042004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:0378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:0583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:0585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201710-18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2017/dsa-4031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/openssl-asn1-buffer-underrun-cve-2017-14033/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Release Notes","Vendor Advisory"]},{"url":"https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2017-3736","sourceIdentifier":"openssl-security@openssl.org","published":"2017-11-02T17:29:00.243","lastModified":"2026-06-17T01:18:49.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen."},{"lang":"es","value":"Existe un error de propagación de dígito (carry propagation) en el procedimiento de elevación al cuadrado de x86_64 Montgomery en OpenSSL en versiones anteriores a la 1.0.2m y 1.1.0 anteriores a la 1.1.0g. Ningún algoritmo EC se ha visto afectado. El análisis sugiere que los ataques contra RSA y DSA como resultado de este defecto serían muy difíciles de realizar y no se ve probable. Los ataques contra DH se consideran simplemente factibles (aunque muy difíciles) porque la mayoría del trabajo necesario para deducir la información sobre una clave privada se puede realizar offline. La cantidad de recursos necesarios para este ataque sería muy elevada y lo más probable es que solo sea accesible para un número limitado de atacantes. Un atacante necesitaría acceso online a un sistema sin parchear que utilice la clave privada objetivo en una situación con parámetros DH persistentes y una clave privada que se comparte entre múltiples clientes. Esto solo afecta a los procesadores que son compatibles con las extensiones BMI1, BMI2 y ADX como Intel Broadwell (5ª generación) y posteriores o AMD Ryzen."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL Software Foundation","product":"OpenSSL","versions":[{"version":"1.1.0 - 1.1.0f","status":"affected"},{"version":"1.0.2 - 1.0.2l","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2m","matchCriteriaId":"C1069D78-287A-4623-9721-FD9E26135354"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndExcluding":"1.1.0g","matchCriteriaId":"28E0F2BE-8EDA-4C09-B251-C35352A621D0"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/101666","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039727","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0998","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2568","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2575","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2713","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201712-03","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171107-0002/","source":"openssl-security@openssl.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180117-0002/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-4017","source":"openssl-security@openssl.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-4018","source":"openssl-security@openssl.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20171102.txt","source":"openssl-security@openssl.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2017-14","source":"openssl-security@openssl.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2017-15","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/101666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201712-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171107-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180117-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-4017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-4018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20171102.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2017-14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2017-15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-8610","sourceIdentifier":"secalert@redhat.com","published":"2017-11-13T22:29:00.203","lastModified":"2026-06-17T00:54:35.887","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients."},{"lang":"es","value":"Se ha encontrado un fallo de denegación de servicio en OpenSSL en las versiones 0.9.8, 1.0.1, 1.0.2 hasta la 1.0.2h y la 1.1.0 en la forma en la que el protocolo TLS/SSL definió el procesamiento de paquetes ALERT durante una negociación de conexión. Un atacante remoto podría emplear este fallo para hacer que un servidor TLS/SSL consuma una cantidad excesiva de recursos de CPU y fracase a la hora de aceptar conexiones de otros clientes."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"All 0.9.8","status":"affected"},{"version":"All 1.0.1","status":"affected"},{"version":"1.0.2 through 1.0.2h","status":"affected"},{"version":"1.1.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]},{"source":"nvd@nist.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndIncluding":"1.0.2h","matchCriteriaId":"0BD3F477-4078-42BC-AF81-A68487FCDBEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"8A4E446D-B9D3-45F2-9722-B41FA14A6C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73104834-5810-48DD-9B97-549D223853F1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"A8442C20-41F9-47FD-9A12-E724D3A31FD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"BF77CDCF-B9C9-427D-B2BF-36650FB2148C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B142ACCC-F7A9-4A3B-BE60-0D6691D5058D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*","matchCriteriaId":"B1ABA871-3271-48E2-A69C-5AD70AF94E53"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:cn1610_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"EB30733E-68FC-49C4-86C0-7FEE75C366BF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:cn1610:-:*:*:*:*:*:*:*","matchCriteriaId":"6361DAC6-600F-4B15-8797-D67F298F46FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"62347994-1353-497C-9C4A-D5D8D95F67E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:data_ontap:-:*:*:*:*:7-mode:*:*","matchCriteriaId":"6C2ACC32-5147-4EA5-95BE-B6B4EAB3D82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*","matchCriteriaId":"E0C4B1E5-75BF-43AE-BBAC-0DD4124C71ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0","versionEndIncluding":"11.40","matchCriteriaId":"9C82200F-A26E-4AD4-82FF-DC5601A28D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:host_agent:-:*:*:*:*:*:*:*","matchCriteriaId":"546855F3-654C-48F0-B3A0-FF1ABBF04007"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*","matchCriteriaId":"7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*","matchCriteriaId":"3FA5E22C-489B-4C5F-A5F3-C03F45CA8811"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*","matchCriteriaId":"5735E553-9731-4AAC-BCFF-989377F817B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:ontap_select_deploy:-:*:*:*:*:*:*:*","matchCriteriaId":"7E968916-8CE0-4165-851F-14E37ECEA948"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:service_processor:-:*:*:*:*:*:*:*","matchCriteriaId":"146A767F-DC04-454B-9913-17D3A2B5AAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"4BB0FDCF-3750-44C6-AC5C-0CC2AAD14093"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapcenter_server:-:*:*:*:*:*:*:*","matchCriteriaId":"E788440A-02B0-45F5-AFBC-7109F3177033"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:unix:*:*","matchCriteriaId":"61D7EF01-F618-497F-9375-8003CEA3D380"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*","matchCriteriaId":"8ADFF451-740F-4DBA-BD23-3881945D3E40"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:storagegrid_webscale:-:*:*:*:*:*:*:*","matchCriteriaId":"813CD8F9-9F05-49A7-BB4D-E9A1D54D6DFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*","matchCriteriaId":"1FED6CAE-D97F-49E0-9D00-1642A3A427B4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1.17","matchCriteriaId":"460EF266-5397-4FB9-B4C3-BECB2FB12AE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.0.15","matchCriteriaId":"2C837CEA-991C-45BA-8DFF-20F4E98E4639"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndIncluding":"7.1.10","matchCriteriaId":"1558B8D3-B289-4143-A3C2-F8EF29CECDD3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:adaptive_access_manager:11.1.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"530B1012-03DF-4AE2-863E-FB07351FE4A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A125E817-F974-4509-872C-B71933F42AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"55D98C27-734F-490B-92D5-251805C841B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_ip_service_activator:7.3.4:*:*:*:*:*:*:*","matchCriteriaId":"BDB13348-C8CA-4E71-9DC6-091B09D52E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:*","matchCriteriaId":"DE7A60DB-A287-4E61-8131-B6314007191B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:core_rdbms:11.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E1367C5D-8815-41E6-B609-E855CB8B1AA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:core_rdbms:12.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7E150F02-5B34-4496-A024-335DF64D7F8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:core_rdbms:12.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4059F859-A7D8-4ADD-93EE-74AF082ED34A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:core_rdbms:18c:*:*:*:*:*:*:*","matchCriteriaId":"C9FFAF8E-4023-4599-9F0D-274E6517CB1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:core_rdbms:19c:*:*:*:*:*:*:*","matchCriteriaId":"9B639209-A651-43FB-8F0C-B25F605521EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*","matchCriteriaId":"AB654DFA-FEF9-4D00-ADB0-F3F2B6ACF13E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"37209C6F-EF99-4D21-9608-B3A06D283D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:goldengate_application_adapters:12.3.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F6F259E6-10A8-4207-8FC2-85ABD70B04C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*","matchCriteriaId":"41684398-18A4-4DC6-B8A2-3EBAA0CBF9A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*","matchCriteriaId":"D0A735B4-4F3C-416B-8C08-9CB21BAD2889"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","matchCriteriaId":"7E1E416B-920B-49A0-9523-382898C2979D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*","matchCriteriaId":"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3:*:*:*:*:*:*:*","matchCriteriaId":"24A3C819-5151-4543-A5C6-998C9387C8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3:*:*:*:*:*:*:*","matchCriteriaId":"4FB98961-8C99-4490-A6B8-9A5158784F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:*","versionEndExcluding":"18.1.4.1.0","matchCriteriaId":"A6DA0527-562D-457F-A2BB-3DF5EAABA1AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B40B13B7-68B3-4510-968C-6A730EB46462"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C93CC705-1F8C-4870-99E6-14BF264C3811"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F14A818F-AA16-4438-A3E4-E64C9287AC66"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2361","matchCriteriaId":"271CACEB-10F5-4CA8-9C99-3274F18EE62D"},{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"xcp3000","versionEndExcluding":"xcp3070","matchCriteriaId":"EF82224E-9EED-472E-A038-768E4179B219"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*","matchCriteriaId":"983D27DE-BC89-454E-AE47-95A26A3651E2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2361","matchCriteriaId":"433EEE1B-134C-48F9-8688-23C5F1ABBF0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"xcp3000","versionEndExcluding":"xcp3070","matchCriteriaId":"8B56D4BF-9328-4998-95F3-D23BD1349280"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*","matchCriteriaId":"5825AEE1-B668-40BD-86A9-2799430C742C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2361","matchCriteriaId":"47FFEE5C-5DAE-4FAD-9651-7983DE092120"},{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"xcp3000","versionEndExcluding":"xcp3070","matchCriteriaId":"62AAD1D8-D312-452A-80E7-97FA3238C95F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*","matchCriteriaId":"3DA2D526-BDCF-4A65-914A-B3BA3A0CD613"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2361","matchCriteriaId":"2FD8BD3B-C35B-4C44-B5A1-FA4646ACB374"},{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"xcp3000","versionEndExcluding":"xcp3070","matchCriteriaId":"F429B6AB-44E3-412F-AAE6-33B6F1150262"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*","matchCriteriaId":"EE0CF40B-E5BD-4558-9321-184D58EF621D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2361","matchCriteriaId":"66D6EF49-7094-41D9-BDF5-AE5846E37418"},{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"xcp3000","versionEndExcluding":"xcp3070","matchCriteriaId":"78152A31-DB06-4F13-94EA-D3C94B240EE0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*","matchCriteriaId":"0F3C9C09-7B2B-4DB6-8BE0-35302ED35776"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2361","matchCriteriaId":"6593DA00-EE33-4223-BEAE-8DC629E79287"},{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"xcp3000","versionEndExcluding":"xcp3070","matchCriteriaId":"EB1FF50C-D9D0-4DF0-90F8-9259BD7B315B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*","matchCriteriaId":"95503CE5-1D06-4092-A60D-D310AADCAFB1"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2017-0286.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0574.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1415.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1659.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://seclists.org/oss-sec/2016/q4/224","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93841","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037084","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1413","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1414","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1658","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1801","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1802","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2493","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2494","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://security.360.cn/cve/CVE-2016-8610/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171130-0001/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.paloaltonetworks.com/CVE-2016-8610","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03897en_us","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-3773","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0286.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0574.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1415.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1659.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://seclists.org/oss-sec/2016/q4/224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=af58be768ebb690f78530f796e92b8ae5c9a4401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://security.360.cn/cve/CVE-2016-8610/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:35.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171130-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.paloaltonetworks.com/CVE-2016-8610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03897en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-3773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2017-8821","sourceIdentifier":"security@debian.org","published":"2017-12-03T07:29:00.380","lastModified":"2026-06-17T01:27:01.367","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, an attacker can cause a denial of service (application hang) via crafted PEM input that signifies a public key requiring a password, which triggers an attempt by the OpenSSL library to ask the user for the password, aka TROVE-2017-011."},{"lang":"es","value":"En Tor, en versiones anteriores a la 0.2.5.16; de la versión 0.2.6 hasta la 0.2.8 anterior a la 0.2.8.17; versiones 0.2.9 anteriores a la 0.2.9.14; versiones 0.3.0 anteriores a la 0.3.0.13 y versiones 0.3.1 anteriores a la 0.3.1.9, un atacante puede provocar una denegación de servicio (bloqueo de la aplicación) mediante una entrada PEM manipulada que represente una clave pública que requiera una contraseña. Esto da lugar a que la biblioteca Open SSLE intente preguntar la contraseña al usuario. Esto también se conoce como TROVE-2017-011."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9","versions":[{"version":"Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*","versionEndExcluding":"0.2.5.16","matchCriteriaId":"067DE048-F786-4E63-98E6-6FD6415DD3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*","versionStartIncluding":"0.2.6","versionEndExcluding":"0.2.8.17","matchCriteriaId":"5372249B-59F8-4866-B4D3-F52980FCC269"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*","versionStartIncluding":"0.2.9","versionEndExcluding":"0.2.9.14","matchCriteriaId":"E0739CCD-DE8F-4A44-91CD-986C4644045F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*","versionStartIncluding":"0.3.0","versionEndExcluding":"0.3.0.13","matchCriteriaId":"E623D0FC-453C-4D7A-8328-C4C252EEC976"},{"vulnerable":true,"criteria":"cpe:2.3:a:tor_project:tor:*:*:*:*:*:*:*:*","versionStartIncluding":"0.3.1","versionEndExcluding":"0.3.1.9","matchCriteriaId":"249879F0-6A12-41C2-9559-020021080696"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]}],"references":[{"url":"https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"https://bugs.torproject.org/24246","source":"security@debian.org","tags":["Vendor Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-4054","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"https://blog.torproject.org/new-stable-tor-releases-security-fixes-0319-03013-02914-02817-02516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.torproject.org/24246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-4054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2017-3737","sourceIdentifier":"openssl-security@openssl.org","published":"2017-12-07T16:29:00.193","lastModified":"2026-06-17T01:18:49.363","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected."},{"lang":"es","value":"OpenSSL 1.0.2 (comenzando desde la versión 1.0.2b) introdujo un mecanismo de \"error state\" (estado de error). La intención era que, si ocurría un error fatal durante una negociación, OpenSSL entraría en el estado de error y fallaría automáticamente si se intentase continuar la negociación. Esto funciona tal y como se ha diseñado para las funciones de negociación explícitas (SSL_do_handshake(), SSL_accept() y SSL_connect()); sin embargo, debido a un error, no funciona correctamente si se llama directamente a SSL_read() o a SSL_write(). En ese caso, si la negociación fracasa, se devolverá un error fatal en la llamada de función inicial. Si, posteriormente, la aplicación llama a SSL_read()/SSL_write() para el mismo objeto SSL, tendrá éxito y los datos se pasarán sin cifrarse/descifrarse directamente desde la capa de registro SSL/TLS. Para explotar esta vulnerabilidad, debería existir un error de aplicación que resulte en una llamada a SSL_read()/SSL_write() que se realiza una vez ya se ha recibido un error fatal. Las versiones 1.0.2b-1.0.2m de OpenSSL se han visto afectadas. Se ha solucionado en OpenSSL 1.0.2n. OpenSSL 1.1.0 no se ha visto afectada."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL Software Foundation","product":"OpenSSL","versions":[{"version":"1.0.2b-1.0.2m","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"},{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*","matchCriteriaId":"FDF148A3-1AA7-4F27-85AB-414C609C626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*","matchCriteriaId":"E15B749E-6808-4788-AE42-7A1587D8697E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2k:*:*:*:*:*:*:*","matchCriteriaId":"58F80C8D-BCA2-40AD-BD22-B70C7BE1B298"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2l:*:*:*:*:*:*:*","matchCriteriaId":"70B78EDF-6BB7-42C4-9423-9332C62C6E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2m:*:*:*:*:*:*:*","matchCriteriaId":"E2354F82-A01B-43D2-84F4-4E94B258E091"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"openssl-security@openssl.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"openssl-security@openssl.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"openssl-security@openssl.org"},{"url":"http://www.securityfocus.com/bid/102103","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039978","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0998","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"openssl-security@openssl.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-179516.pdf","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/898fb884b706aaeb283de4812340bb0bde8476dc","source":"openssl-security@openssl.org"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201712-03","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171208-0001/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180117-0002/","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20180419-0002/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2017/dsa-4065","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.digitalmunition.me/2017/12/cve-2017-3737-openssl-security-bypass-vulnerability/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20171207.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2017-16","source":"openssl-security@openssl.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/102103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-179516.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/898fb884b706aaeb283de4812340bb0bde8476dc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201712-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171208-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180117-0002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20180419-0002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2017/dsa-4065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.digitalmunition.me/2017/12/cve-2017-3737-openssl-security-bypass-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20171207.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2017-16","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2017-3738","sourceIdentifier":"openssl-security@openssl.org","published":"2017-12-07T16:29:00.240","lastModified":"2026-06-17T01:18:49.583","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository."},{"lang":"es","value":"Existe un error de desbordamiento en el procedimiento de multiplicación AVX2 Montgomery empleado en la exponenciación con módulos de 1024 bits. Los algoritmos EC no se han visto afectados. Los análisis sugieren que los ataques contra RSA y DSA como resultado de este defecto serían muy difíciles de realizar y se cree que son improbables. Los ataques contra DH102 se consideran solo posibles, ya que la mayor parte del trabajo necesario para deducir información sobre una clave privada puede realizarse sin conexión. La cantidad de recursos necesarios para realizar tal ataque sería significativa. Sin embargo, para que un ataque sobre TLS sea significativo, el servidor tendría que compartir la clave privada DH1024 entre múltiples clientes, lo que ya no es una opción desde CVE-2016-0701. Esto solo afecta a procesadores compatibles con la extensión AVX2, pero no la ADX, como Intel Haswell (cuarta generación). Nota: El impacto de este problema es similar a CVE-2017-3736, CVE-2017-3732 y CVE-2015-3193. Se han visto afectadas las versiones 1.0.2-1.0.2m y 1.1.0-1.1.0g de OpenSSL. Se ha solucionado en OpenSSL 1.0.2n. Debido a la baja gravedad de este problema, no se va a lanzar una nueva versión de OpenSSL 1.1.0 en este momento. La corrección se aplicará en OpenSSL 1.1.0h cuando esté disponible. La corrección también estará disponible en el commit con ID e502cc86d en el repositorio Git de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL Software Foundation","product":"OpenSSL","versions":[{"version":"1.0.2-1.02m","status":"affected"},{"version":"1.1.0-1.1.0g","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*","matchCriteriaId":"FDF148A3-1AA7-4F27-85AB-414C609C626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*","matchCriteriaId":"E15B749E-6808-4788-AE42-7A1587D8697E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2k:*:*:*:*:*:*:*","matchCriteriaId":"58F80C8D-BCA2-40AD-BD22-B70C7BE1B298"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2l:*:*:*:*:*:*:*","matchCriteriaId":"70B78EDF-6BB7-42C4-9423-9332C62C6E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2m:*:*:*:*:*:*:*","matchCriteriaId":"E2354F82-A01B-43D2-84F4-4E94B258E091"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73104834-5810-48DD-9B97-549D223853F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*","matchCriteriaId":"C9D7A18A-116B-4F68-BEA3-A4E9DDDA55C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*","matchCriteriaId":"CFC70262-0DCD-4B46-9C96-FD18D0207511"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0c:*:*:*:*:*:*:*","matchCriteriaId":"B2E07A34-08A0-4765-AF81-46A3BDC5648A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0d:*:*:*:*:*:*:*","matchCriteriaId":"83B0A3D8-60C7-4F42-9DD6-C535F983D98B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0e:*:*:*:*:*:*:*","matchCriteriaId":"CD08E859-BB6D-4909-A873-C2609FA2821A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0f:*:*:*:*:*:*:*","matchCriteriaId":"C2BF7D67-EAF4-4D01-9185-0DB69F2C543B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0g:*:*:*:*:*:*:*","matchCriteriaId":"179144A7-D263-4BD8-A019-35DE39C777FC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.8.7","matchCriteriaId":"3818E441-8DC4-42E6-8D11-E58D195CBE8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.8.1","matchCriteriaId":"D107EC29-67E7-40C3-8E5A-324C9105C5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"6.9.0","versionEndExcluding":"6.12.2","matchCriteriaId":"BEA03114-7288-4E7C-9220-C0ABCD5F0389"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.8.1","matchCriteriaId":"74FB695D-2C76-47AB-988E-5629D2E695E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"8.9.0","versionEndExcluding":"8.9.3","matchCriteriaId":"C45E9D50-CD3D-480B-B9B8-451ADFF26505"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.2.1","matchCriteriaId":"82FDBB10-3298-4C9A-9CC0-D34643AEC868"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/102118","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039978","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0998","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://github.com/openssl/openssl/commit/e502cc86df9dafded1694fceb3228ee34d11c11a","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201712-03","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171208-0001/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-4065","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4157","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20171207.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.openssl.org/news/secadv/20180327.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2017-16","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-04","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-06","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-07","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/102118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/openssl/openssl/commit/e502cc86df9dafded1694fceb3228ee34d11c11a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201712-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171208-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2017/dsa-4065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20171207.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.openssl.org/news/secadv/20180327.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2017-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-07","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2017-15896","sourceIdentifier":"cve-request@iojs.org","published":"2017-12-11T21:29:00.517","lastModified":"2026-06-17T01:08:27.230","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption."},{"lang":"es","value":"Node.js se ha visto afectado por una vulnerabilidad de OpenSSL (CVE-2017-3737) en relación con el uso de SSL_read() debido a un error en la negociación TLS. El resultado era que un atacante de una red activa podría enviar datos de la aplicación a Node.js empleando los módulos TLS o HTTP2 de forma que omitan la autenticación y codificación TLS."}],"affected":[{"source":"cve-request@iojs.org","affectedData":[{"vendor":"The Node.js Project","product":"Node.js","versions":[{"version":"4.0.0 and higher","status":"affected"},{"version":"6.0.0 and higher","status":"affected"},{"version":"8.0.0 and higher","status":"affected"},{"version":"9.0.0 and higher","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.1.2","matchCriteriaId":"A47FC4F7-1F77-4314-B4B3-3C5D8E335379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.8.7","matchCriteriaId":"3818E441-8DC4-42E6-8D11-E58D195CBE8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.8.1","matchCriteriaId":"D107EC29-67E7-40C3-8E5A-324C9105C5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"6.9.0","versionEndExcluding":"6.12.2","matchCriteriaId":"BEA03114-7288-4E7C-9220-C0ABCD5F0389"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.8.1","matchCriteriaId":"74FB695D-2C76-47AB-988E-5629D2E695E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"8.9.0","versionEndExcluding":"8.9.3","matchCriteriaId":"C45E9D50-CD3D-480B-B9B8-451ADFF26505"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.2.1","matchCriteriaId":"82FDBB10-3298-4C9A-9CC0-D34643AEC868"}]}]}],"references":[{"url":"https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/","source":"cve-request@iojs.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2014-4993","sourceIdentifier":"cve@mitre.org","published":"2018-01-10T18:29:00.307","lastModified":"2026-06-17T00:10:53.103","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"(1) lib/backup/cli/utility.rb in the backup-agoddard gem 3.0.28 and (2) lib/backup/cli/utility.rb in the backup_checksum gem 3.0.23 for Ruby place credentials on the openssl command line, which allows local users to obtain sensitive information by listing the process."},{"lang":"es","value":"(1) lib/backup/cli/utility.rb en la gema backup-agoddard 3.0.28 y (2) lib/backup/cli/utility.rb en la gema backup_checksum 3.0.23 para Ruby colocan credenciales en la línea de comandos de openssl. Esto permite que usuarios locales obtengan información sensible listando el proceso."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:backup-agoddard_project:backup-agoddard:3.0.28:*:*:*:*:ruby:*:*","matchCriteriaId":"BCD8C68A-1858-4AEE-B286-DB6674C13D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:backup_checksum_project:backup_checksum:3.0.23:*:*:*:*:ruby:*:*","matchCriteriaId":"3115313E-13B6-4B85-BF01-C80A5880C91B"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2014/07/07/11","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/07/07/12","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/07/17/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.vapid.dhs.org/advisories/backup-agoddard-3.0.28.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.vapid.dhs.org/advisories/backup_checksum-3.0.23.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/07/07/11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/07/07/12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2014/07/17/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.vapid.dhs.org/advisories/backup-agoddard-3.0.28.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.vapid.dhs.org/advisories/backup_checksum-3.0.23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2018-0733","sourceIdentifier":"openssl-security@openssl.org","published":"2018-03-27T21:29:00.610","lastModified":"2026-06-17T01:31:32.683","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security claims of the scheme. The module can only be compiled by the HP-UX assembler, so that only HP-UX PA-RISC targets are affected. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g)."},{"lang":"es","value":"Debido a un error de implementación, la función CRYPTO_memcmp en PA-RISC únicamente compara el bit menos significativo o de menor peso de cada byte. Esto permite que un atacante falsifique mensajes que se considerarían como autenticados en una cantidad de intentos menor que los que aseguran las garantías de seguridad del esquema. El módulo solo se puede compilar con un ensamblador HP-UX, de forma que solo se ven afectados los PA-RISC de HP-UX. Solucionado en OpenSSL 1.1.0h (versiones 1.1.0-1.1.0g afectadas)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g)","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.0g","matchCriteriaId":"322768B5-2E14-40B9-A784-8981F4376E13"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"openssl-security@openssl.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"openssl-security@openssl.org"},{"url":"http://www.securityfocus.com/bid/103517","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040576","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=56d5a4bfcaf37fa420aef2bb881aa55e61cf5f2f","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/201811-21","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20180330-0002/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20180327.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2018-04","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2018-06","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2018-07","source":"openssl-security@openssl.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/103517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=56d5a4bfcaf37fa420aef2bb881aa55e61cf5f2f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201811-21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20180330-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20180327.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2018-04","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2018-06","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2018-07","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2018-0739","sourceIdentifier":"openssl-security@openssl.org","published":"2018-03-27T21:29:00.673","lastModified":"2026-06-17T01:31:33.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n)."},{"lang":"es","value":"Los tipos constructed ASN.1 con una definición recursiva (como la que podemos encontrar en PKCS7) podrían acabar excediendo la pila debido a entradas maliciosas con recursión excesiva. Esto podría dar como resultado un ataque de denegación de servicio (DoS). No hay estructuras de este tipo empleadas en SSL/TLS que provengan de fuentes no fiables, por lo que se consideran seguras. Solucionado en OpenSSL 1.1.0h (versiones 1.1.0-1.1.0g afectadas). Solucionado en OpenSSL 1.0.2o (versiones 1.0.2b-1.0.2n afectadas)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n)","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-674"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2b","versionEndIncluding":"1.0.2n","matchCriteriaId":"FFF63A06-9A8B-4280-A52D-4280136908CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.0g","matchCriteriaId":"322768B5-2E14-40B9-A784-8981F4376E13"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*","matchCriteriaId":"9070C9D8-A14A-467F-8253-33B966C16886"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"openssl-security@openssl.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"openssl-security@openssl.org"},{"url":"http://www.securityfocus.com/bid/103518","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/105609","source":"openssl-security@openssl.org"},{"url":"http://www.securitytracker.com/id/1040576","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3090","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:3221","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:3505","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2019:0366","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2019:0367","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2019:1711","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2019:1712","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2ac4c6f7b2b2af20c0e2b0ba05367e454cd11b33","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9310d45087ae546e27e61ddf8f6367f29848220d","source":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2018/03/msg00033.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/201811-21","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/202007-53","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20180330-0002/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180726-0002/","source":"openssl-security@openssl.org"},{"url":"https://securityadvisories.paloaltonetworks.com/Home/Detail/133","source":"openssl-security@openssl.org"},{"url":"https://usn.ubuntu.com/3611-1/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3611-2/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4157","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4158","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20180327.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2018-04","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2018-06","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2018-07","source":"openssl-security@openssl.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/103518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/105609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1040576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:3221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2019:0366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2019:0367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2019:1711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2019:1712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2ac4c6f7b2b2af20c0e2b0ba05367e454cd11b33","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9310d45087ae546e27e61ddf8f6367f29848220d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2018/03/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201811-21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202007-53","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20180330-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180726-0002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://securityadvisories.paloaltonetworks.com/Home/Detail/133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/3611-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3611-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20180327.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2018-04","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2018-06","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2018-07","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2018-0737","sourceIdentifier":"openssl-security@openssl.org","published":"2018-04-16T18:29:00.267","lastModified":"2026-10-15T18:17:05.900","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o)."},{"lang":"es","value":"Se ha demostrado que el algoritmo de generación de claves RSA en OpenSSL es vulnerable a un ataque de sincronización de canal lateral de caché. Un atacante con acceso suficiente para montar ataques de sincronización de caché durante el proceso de generación de claves RSA podría recuperar la clave privada. Se ha solucionado en OpenSSL 1.1.0i-dev (afecta a 1.1.0-1.1.0h). Se ha solucionado en OpenSSL 1.0.2p-dev (afecta a 1.0.2b-1.0.2o)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o)","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-15T17:19:07.239978Z","id":"CVE-2018-0737","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2b","versionEndIncluding":"1.0.2o","matchCriteriaId":"E14A0A5C-7968-4966-B32C-FAFB42644B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.0h","matchCriteriaId":"BF986111-5DDB-4BC8-AF03-14626778AB23"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*","matchCriteriaId":"9070C9D8-A14A-467F-8253-33B966C16886"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"openssl-security@openssl.org"},{"url":"http://www.securityfocus.com/bid/103766","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040685","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3221","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:3505","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2019:3932","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2019:3933","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2019:3935","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=349a41da1ad88ad87825414752a8ff5fdd6a6c3f","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6939eab03a6e23d2bd2c3f5e34fe1d48e542e787","source":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","source":"openssl-security@openssl.org"},{"url":"https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/201811-21","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20180726-0003/","source":"openssl-security@openssl.org"},{"url":"https://securityadvisories.paloaltonetworks.com/Home/Detail/133","source":"openssl-security@openssl.org"},{"url":"https://usn.ubuntu.com/3628-1/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3628-2/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3692-1/","source":"openssl-security@openssl.org"},{"url":"https://usn.ubuntu.com/3692-2/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2018/dsa-4348","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2018/dsa-4355","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20180416.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2018-12","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2018-13","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2018-14","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2018-17","source":"openssl-security@openssl.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/103766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:3505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2019:3932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2019:3933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2019:3935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=349a41da1ad88ad87825414752a8ff5fdd6a6c3f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6939eab03a6e23d2bd2c3f5e34fe1d48e542e787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201811-21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20180726-0003/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://securityadvisories.paloaltonetworks.com/Home/Detail/133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/3628-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3628-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3692-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/3692-2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2018/dsa-4348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2018/dsa-4355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20180416.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2018-12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2018-13","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2018-14","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2018-17","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2017-16065","sourceIdentifier":"support@hackerone.com","published":"2018-06-07T02:29:00.567","lastModified":"2026-06-17T01:08:44.400","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm."},{"lang":"es","value":"\"openssl.js\" era un módulo malicioso publicado para secuestrar variables de entorno. Ha sido retirado por npm."}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"HackerOne","product":"openssl.js node module","versions":[{"version":"All versions","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"support@hackerone.com","type":"Secondary","description":[{"lang":"en","value":"CWE-506"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl.js_project:openssl.js:*:*:*:*:*:node.js:*:*","matchCriteriaId":"5044C9C4-F6B9-4926-9E73-2F104806EBD1"}]}]}],"references":[{"url":"https://nodesecurity.io/advisories/504","source":"support@hackerone.com","tags":["Third Party Advisory"]},{"url":"https://nodesecurity.io/advisories/504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2018-0732","sourceIdentifier":"openssl-security@openssl.org","published":"2018-06-12T13:29:00.207","lastModified":"2026-10-08T22:16:42.537","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o)."},{"lang":"es","value":"Durante los acuerdos de clave en un handshake TLS mediante un conjunto de cifrado basado en DH(E), un servidor malicioso puede enviar un valor primo muy grande al cliente. Esto provocará que el cliente gaste una cantidad de tiempo demasiado grande generando una clave para este primo, lo que resulta en un bloqueo hasta que termine el cliente. Esto podría explotarse en un ataque de Denegación de servicio (DoS). Se ha solucionado en OpenSSL 1.1.0i-dev (afecta a 1.1.0-1.1.0h). Se ha solucionado en OpenSSL 1.0.2p-dev (afecta a 1.0.2-1.0.2o)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-08T21:08:26.802267Z","id":"CVE-2018-0732","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-320"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndIncluding":"1.0.2o","matchCriteriaId":"5DADB202-4A40-4A12-9CEA-F7BD4529F002"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.0h","matchCriteriaId":"BF986111-5DDB-4BC8-AF03-14626778AB23"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*","matchCriteriaId":"9070C9D8-A14A-467F-8253-33B966C16886"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.8.1","matchCriteriaId":"344E262B-2C2F-42B4-B6BF-56ECC9792F37"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"6.9.0","versionEndExcluding":"6.14.4","matchCriteriaId":"2D7B18CD-B613-47B1-84AB-E63CC8C217C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.8.1","matchCriteriaId":"F2A7041F-CF80-4FB3-9A45-1C454BEFF0D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"8.9.0","versionEndExcluding":"8.11.4","matchCriteriaId":"2F1E356E-A599-4741-BD5C-B6CD8C23F8F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.9.0","matchCriteriaId":"BD090ABA-35A0-4884-B811-F2681DCDE777"}]}]}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/104442","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041090","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2552","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2553","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3221","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3505","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1296","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1297","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1543","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-419820.pdf","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3984ef0b72831da8b3ece4745cac4f8575b19098","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ea7abeeabf92b7aca160bdd0208636d4da69f4f4","source":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","source":"openssl-security@openssl.org"},{"url":"https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201811-03","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20181105-0001/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190118-0002/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://securityadvisories.paloaltonetworks.com/Home/Detail/133","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3692-1/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3692-2/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4348","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4355","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20180612.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-12","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-13","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-14","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-17","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/104442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-419820.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3984ef0b72831da8b3ece4745cac4f8575b19098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ea7abeeabf92b7aca160bdd0208636d4da69f4f4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201811-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20181105-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190118-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://securityadvisories.paloaltonetworks.com/Home/Detail/133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3692-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3692-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20180612.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2016-7056","sourceIdentifier":"secalert@redhat.com","published":"2018-09-10T16:29:00.543","lastModified":"2026-06-17T00:52:15.933","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys."},{"lang":"es","value":"Se ha encontrado un error de ataque de sincronización en OpenSSL, en versiones 1.0.1u y anteriores, que podría permitir que un usuario malicioso con acceso local recupere claves privadas ECDSA P-256"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"The OpenSSL Project","product":"openssl","versions":[{"version":"openssl 1.0.1u","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-385"}]},{"source":"nvd@nist.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-320"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1u","matchCriteriaId":"F8171E97-CCEE-4CE4-8BEE-472FCE7ABCD8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2017-1415.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/95375","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037575","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1413","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1414","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1801","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1802","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7056","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://eprint.iacr.org/2016/1195","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/033_libcrypto.patch.sig","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/016_libcrypto.patch.sig","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=8aed2a7548362e88e84a7feb795a3a97e8395008","source":"secalert@redhat.com"},{"url":"https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-7056.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://seclists.org/oss-sec/2017/q1/52","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-7056","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://www.debian.org/security/2017/dsa-3773","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-1415.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/95375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://eprint.iacr.org/2016/1195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/033_libcrypto.patch.sig","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/016_libcrypto.patch.sig","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=8aed2a7548362e88e84a7feb795a3a97e8395008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-7056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://seclists.org/oss-sec/2017/q1/52","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-7056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://www.debian.org/security/2017/dsa-3773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2018-0735","sourceIdentifier":"openssl-security@openssl.org","published":"2018-10-29T13:29:00.263","lastModified":"2026-10-08T22:16:43.880","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1)."},{"lang":"es","value":"Se ha demostrado que el algoritmo de firmas ECDSA en OpenSSL es vulnerable a un ataque de sincronización de canal lateral. Un atacante podría emplear variaciones en el algoritmo de firma para recuperar la clave privada. Se ha solucionado en OpenSSL 1.1.0j (afecta a 1.1.0-1.1.0i). Se ha solucionado en OpenSSL 1.1.1a (afecta a 1.1.1)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i)","status":"affected"},{"version":"Fixed in OpenSSL 1.1.1a (Affected 1.1.1)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-08T21:08:12.584071Z","id":"CVE-2018-0735","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.0i","matchCriteriaId":"5953EAB1-D0E8-48EA-B07D-3B828E6BB326"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F69F3542-173D-4E0D-99BB-42FDD206D996"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*","matchCriteriaId":"07C312A0-CD2C-4B9C-B064-6409B25C278F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.12.0","matchCriteriaId":"5725F854-27B7-4BC1-8DCA-FAC0B4E41139"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"11.0.0","versionEndExcluding":"11.3.0","matchCriteriaId":"4E62EA78-C705-4AC9-9C0B-3C9114087C37"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:10.13.0:*:*:*:lts:*:*:*","matchCriteriaId":"541EAE2B-5446-46CE-BC91-13188EAD6092"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:cn1610_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"EB30733E-68FC-49C4-86C0-7FEE75C366BF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:cn1610:-:*:*:*:*:*:*:*","matchCriteriaId":"6361DAC6-600F-4B15-8797-D67F298F46FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*","matchCriteriaId":"5C2089EE-5D7F-47EC-8EA5-0F69790564C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*","matchCriteriaId":"85DF4B3F-4BBC-42B7-B729-096934523D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"CBF1DFDA-FB66-4CEA-A658-B167326D1D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*","versionStartIncluding":"9.4","matchCriteriaId":"7E49ACFC-FD48-4ED7-86E8-68B5B753852C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"361B791A-D336-4431-8F68-8135BEFFAEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"4BB0FDCF-3750-44C6-AC5C-0CC2AAD14093"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:unix:*:*","matchCriteriaId":"61D7EF01-F618-497F-9375-8003CEA3D380"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:windows:*:*","matchCriteriaId":"BEDE62C6-D571-4AF8-B85E-CBBCE4AF98B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:steelstore:-:*:*:*:*:*:*:*","matchCriteriaId":"0DF5449D-22D2-48B4-8F50-57B43DCB15B9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5553591-073B-45E3-999F-21B8BA2EEE22"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"BD941CDF-8486-43F7-9D98-2B8785B1B139"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"EDE18990-1FC9-4624-971B-2E87BF0871AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"17C29F2D-CBE6-4E22-98AE-787E939ED161"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"98F3E643-4B65-4668-BB11-C61ED54D5A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"459B4A5F-A6BD-4A1C-B6B7-C979F005EB70"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CDCE0E90-495E-4437-8529-3C36441FB69D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*","matchCriteriaId":"AB654DFA-FEF9-4D00-ADB0-F3F2B6ACF13E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.42","matchCriteriaId":"65B4E766-8D75-48A9-8267-6EE1407B949D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.24","matchCriteriaId":"F17AD8D0-6D79-4E7D-9CD6-9B130A529C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.13","matchCriteriaId":"C743C44C-2E97-4E5E-8C76-FC0E666BA115"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*","matchCriteriaId":"D0A735B4-4F3C-416B-8C08-9CB21BAD2889"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","matchCriteriaId":"7E1E416B-920B-49A0-9523-382898C2979D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*","versionStartIncluding":"17.7","versionEndIncluding":"17.12","matchCriteriaId":"7A1E1023-2EB9-4334-9B74-CA71480F71C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*","matchCriteriaId":"84BF6794-2CE6-407F-B8E0-81871AB7B40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*","matchCriteriaId":"93A4E178-0082-45C5-BBC0-0A4E51C8B1DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F021C23-AB9B-4877-833F-D01359A98762"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*","matchCriteriaId":"2F8ED016-32A1-42EE-844E-3E6B2C116B74"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.2:*:*:*:*:*:*:*","matchCriteriaId":"A046CC2C-445F-4336-8810-930570B4FEC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:18.8:*:*:*:*:*:*:*","matchCriteriaId":"0745445C-EC43-4091-BA7C-5105AFCC6F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_global_desktop:5.4:*:*:*:*:*:*:*","matchCriteriaId":"B5265C91-FF5C-4451-A7C2-D388A65ACFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:tuxedo:12.1.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"92A6A7BA-CCE6-426F-8434-7A578A245180"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.0","matchCriteriaId":"B52550D1-38F6-4AAC-BE68-487F7D6DB2D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.2.24","matchCriteriaId":"F3F69D90-6F4D-4D09-8F60-E36072303E32"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/105750","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041986","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3700","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=56fb454d281a023b3f950d969693553d3f3ceea1","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=b1d6d55ece1c26fa2829e2b819b038d7b6d692b4","source":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20181105-0002/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3840-1/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4348","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20181029.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/105750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1041986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=56fb454d281a023b3f950d969693553d3f3ceea1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=b1d6d55ece1c26fa2829e2b819b038d7b6d692b4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20181105-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3840-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20181029.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2018-0734","sourceIdentifier":"openssl-security@openssl.org","published":"2018-10-30T12:29:00.257","lastModified":"2026-10-08T22:16:42.960","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p)."},{"lang":"es","value":"Se ha demostrado que el algoritmo de firmas DSA en OpenSSL es vulnerable a un ataque de sincronización de canal lateral. Un atacante podría emplear variaciones en el algoritmo de firma para recuperar la clave privada. Se ha solucionado en OpenSSL 1.1.1a (afecta a 1.1.1). Se ha solucionado en OpenSSL 1.1.0j (afecta a 1.1.0-1.1.0i). Se ha solucionado en OpenSSL 1.0.2q (afecta a 1.0.2-1.0.2p)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1a (Affected 1.1.1)","status":"affected"},{"version":"Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-08T21:03:09.967599Z","id":"CVE-2018-0734","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndIncluding":"1.0.2p","matchCriteriaId":"D942BAB1-862E-455A-AAB5-6E87FA891B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.0i","matchCriteriaId":"5953EAB1-D0E8-48EA-B07D-3B828E6BB326"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F69F3542-173D-4E0D-99BB-42FDD206D996"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*","matchCriteriaId":"07C312A0-CD2C-4B9C-B064-6409B25C278F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.8.1","matchCriteriaId":"D107EC29-67E7-40C3-8E5A-324C9105C5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"6.9.0","versionEndExcluding":"6.15.0","matchCriteriaId":"2DEF4845-F577-4B12-AA48-39F0830B128E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.8.1","matchCriteriaId":"74FB695D-2C76-47AB-988E-5629D2E695E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"8.9.0","versionEndExcluding":"8.14.0","matchCriteriaId":"7E79DFA7-55F8-453A-83E9-1C790902FCB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"10.0.0","versionEndIncluding":"10.12.0","matchCriteriaId":"25A3180B-21AF-4010-9DAB-41ADFD2D8031"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"11.0.0","versionEndExcluding":"11.3.0","matchCriteriaId":"4E62EA78-C705-4AC9-9C0B-3C9114087C37"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:10.13.0:*:*:*:lts:*:*:*","matchCriteriaId":"541EAE2B-5446-46CE-BC91-13188EAD6092"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:cn1610_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"EB30733E-68FC-49C4-86C0-7FEE75C366BF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:cn1610:-:*:*:*:*:*:*:*","matchCriteriaId":"6361DAC6-600F-4B15-8797-D67F298F46FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*","matchCriteriaId":"5C2089EE-5D7F-47EC-8EA5-0F69790564C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"CBF1DFDA-FB66-4CEA-A658-B167326D1D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"361B791A-D336-4431-8F68-8135BEFFAEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","matchCriteriaId":"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:steelstore:-:*:*:*:*:*:*:*","matchCriteriaId":"0DF5449D-22D2-48B4-8F50-57B43DCB15B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*","matchCriteriaId":"7B7A6697-98CC-4E36-93DB-B7160F8399F9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5553591-073B-45E3-999F-21B8BA2EEE22"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_technology_stack:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"913DA418-A144-48CF-85AB-75B64BFD16DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_technology_stack:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BBE38DB6-795A-479B-84A5-3DBA4A101F06"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite_technology_stack:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E18AA832-DAC1-41D2-8A7C-2C41F06A2281"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"98F3E643-4B65-4668-BB11-C61ED54D5A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"459B4A5F-A6BD-4A1C-B6B7-C979F005EB70"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CDCE0E90-495E-4437-8529-3C36441FB69D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*","matchCriteriaId":"AB654DFA-FEF9-4D00-ADB0-F3F2B6ACF13E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_enterprise_backup:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndIncluding":"3.12.3","matchCriteriaId":"62B31BEE-88C3-431D-8356-AC28F325E76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_enterprise_backup:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndIncluding":"4.1.2","matchCriteriaId":"4340D49A-E1F8-48B7-BA05-0338293B1A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*","matchCriteriaId":"D0A735B4-4F3C-416B-8C08-9CB21BAD2889"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","matchCriteriaId":"7E1E416B-920B-49A0-9523-382898C2979D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_professional_project_management:*:*:*:*:*:*:*:*","versionStartIncluding":"17.7","versionEndIncluding":"17.12","matchCriteriaId":"08720A23-3B40-4394-8785-845EFEEFAA87"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_professional_project_management:8.4:*:*:*:*:*:*:*","matchCriteriaId":"7CFFE5D2-FB9A-45F9-9FBC-25A6DA9E189A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_professional_project_management:15.1:*:*:*:*:*:*:*","matchCriteriaId":"092AD60D-99F2-4203-966A-3002E6D9C55B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_professional_project_management:15.2:*:*:*:*:*:*:*","matchCriteriaId":"273EAFA7-81C4-41A6-B44A-95BA18D9DCB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_professional_project_management:16.1:*:*:*:*:*:*:*","matchCriteriaId":"DA25D523-25C4-4EFD-A1BC-0BEEB0EEF8AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_professional_project_management:16.2:*:*:*:*:*:*:*","matchCriteriaId":"F2DEE1C6-215C-47B5-A92D-E4627AD9D503"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_p6_professional_project_management:18.8:*:*:*:*:*:*:*","matchCriteriaId":"BBE3E82F-DCB6-4E1E-BA08-67C85384BBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:tuxedo:12.1.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"92A6A7BA-CCE6-426F-8434-7A578A245180"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/105758","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2304","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3700","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3932","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3933","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3935","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=43e6a58d4991a451daf4891ff05a48735df871ac","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8abfe72e8c1de1b95f50aa0d9134803b4d00070f","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ef11e19d1365eea2b1851e6f540a0bf365d303e7","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","source":"openssl-security@openssl.org"},{"url":"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20181105-0002/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190118-0002/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190423-0002/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3840-1/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4348","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4355","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20181030.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-16","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-17","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/105758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=43e6a58d4991a451daf4891ff05a48735df871ac","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8abfe72e8c1de1b95f50aa0d9134803b4d00070f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ef11e19d1365eea2b1851e6f540a0bf365d303e7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20181105-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190118-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190423-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3840-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20181030.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2018-17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2018-16395","sourceIdentifier":"cve@mitre.org","published":"2018-11-16T18:29:00.943","lastModified":"2026-06-17T01:44:12.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations."},{"lang":"es","value":"Se ha descubierto un problema en la biblioteca OpenSSL en Ruby, en versiones anteriores a la 2.3.8, versiones 2.4.x anteriores a la 2.4.5, versiones 2.5.x anteriores a la 2.5.2 y versiones 2.6.x anteriores a la 2.6.0-preview3. Cuando dos objetos OpenSSL::X509::Name se comparan mediante ==, dependiendo del orden, los objetos que no son iguales podrían devolver \"true\". Cuando el primer argumento tiene un carácter más que el segundo, o el segundo argumento contiene un carácter que tiene uno menos que el carácter en la misma posición que el primer argumento, el resultado de == será \"true\". Esto podría aprovecharse para crear un certificado ilegítimo que podría ser aceptado como legítimo y después emplearse en operaciones de firma o cifrado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:openssl:*:*:*:*:*:ruby:*:*","versionEndExcluding":"2.1.2","matchCriteriaId":"DDD3EC39-B375-4B68-963F-08418673D321"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndIncluding":"2.3.7","matchCriteriaId":"4F4CB899-0054-44BB-A3BD-FB225CC663DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.0","versionEndIncluding":"2.4.4","matchCriteriaId":"4A07531E-A788-41ED-8C5D-AAB2F532EA7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5.0","versionEndIncluding":"2.5.1","matchCriteriaId":"70C32AF6-57D9-4F85-857B-4EFC425D9145"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.6.0:preview1:*:*:*:*:*:*","matchCriteriaId":"787FDFC6-E780-4F95-9E46-C5CF77E7EBC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.6.0:preview2:*:*:*:*:*:*","matchCriteriaId":"49B6EEAA-B52E-42B9-A6C2-D65D7C81A0EC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*","matchCriteriaId":"07C312A0-CD2C-4B9C-B064-6409B25C278F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.4:*:*:*:*:*:*:*","matchCriteriaId":"041F9200-4C01-4187-AE34-240E8277B54D"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1042105","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3729","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3730","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3731","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3738","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1948","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2565","source":"cve@mitre.org"},{"url":"https://hackerone.com/reports/387250","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/10/msg00020.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190221-0002/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3808-1/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4332","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"cve@mitre.org"},{"url":"https://www.ruby-lang.org/en/news/2018/10/17/openssl-x509-name-equality-check-does-not-work-correctly-cve-2018-16395/","source":"cve@mitre.org","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.ruby-lang.org/en/news/2018/10/17/ruby-2-3-8-released/","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.ruby-lang.org/en/news/2018/10/17/ruby-2-4-5-released/","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.ruby-lang.org/en/news/2018/10/17/ruby-2-5-2-released/","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.ruby-lang.org/en/news/2018/11/06/ruby-2-6-0-preview3-released/","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1042105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://hackerone.com/reports/387250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/10/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190221-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3808-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.ruby-lang.org/en/news/2018/10/17/openssl-x509-name-equality-check-does-not-work-correctly-cve-2018-16395/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.ruby-lang.org/en/news/2018/10/17/ruby-2-3-8-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.ruby-lang.org/en/news/2018/10/17/ruby-2-4-5-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.ruby-lang.org/en/news/2018/10/17/ruby-2-5-2-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.ruby-lang.org/en/news/2018/11/06/ruby-2-6-0-preview3-released/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-0190","sourceIdentifier":"security@apache.org","published":"2019-01-30T22:29:00.497","lastModified":"2026-06-17T02:07:54.847","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or later, due to an interaction in changes to handling of renegotiation attempts."},{"lang":"es","value":"Existe un problema en la manera en la que mod_ssl gestionaba registros de cliente. Un atacante remoto podría enviar una petición especialmente manipulada que conduciría a que mod_ssl entre en un bucle, provocando una denegación de servicio (DoS).  Este problema puede desencadenarse con Apache HTTP Server, en su versión 2.4.37, a la hora de utilizar OpenSSL, en versiones 1.1.1 o anteriores, debido a una interacción en cambios de la gestión de intentos de renegociación."}],"affected":[{"source":"security@apache.org","affectedData":[{"vendor":"Apache Software Foundation","product":"Apache HTTP Server","versions":[{"version":"Apache HTTP Server 2.4.37","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.4.37:*:*:*:*:*:*:*","matchCriteriaId":"DE5F8320-A680-4E2F-B32F-F7DBEED09ED6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","matchCriteriaId":"8822FB8F-06BE-4B95-8385-148A1F1F7255"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*","matchCriteriaId":"AB654DFA-FEF9-4D00-ADB0-F3F2B6ACF13E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1A3DC116-2844-47A1-BEC2-D0675DD97148"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F1DF3E-0F2D-4EFC-9A3E-F72149C8AE94"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*","matchCriteriaId":"82EA4BA7-C38B-4AF3-8914-9E3D089EBDD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*","matchCriteriaId":"B9C9BC66-FA5F-4774-9BDA-7AB88E2839C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*","matchCriteriaId":"7F69B9A5-F21B-4904-9F27-95C0F7A628E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:7.0:*:*:*:*:*:*:*","matchCriteriaId":"2F87FC90-16D0-4051-8280-B0DD4441F10B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:*:*:*:*:*:*:*","matchCriteriaId":"A0ED83E3-E6BF-4EAA-AF8F-33485A88A218"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/106743","source":"security@apache.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","source":"security@apache.org","tags":["Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"security@apache.org"},{"url":"https://security.gentoo.org/glsa/201903-21","source":"security@apache.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190125-0001/","source":"security@apache.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"security@apache.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"security@apache.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"security@apache.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/106743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201903-21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190125-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-1559","sourceIdentifier":"openssl-security@openssl.org","published":"2019-02-27T23:29:00.277","lastModified":"2026-06-17T02:28:44.967","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q)."},{"lang":"es","value":"Si una aplicación encuentra un error de protocolo \"fatal\" y llama a SSL_shutdown() dos veces (una vez para enviar un close_notify y otra vez para recibir uno de éstos), posteriormente OpenSLL puede responder de manera diferente a la aplicación llamante si un registro de 0 byte se recibe con un relleno inválido, comparado con si un registro de 0 bytes se recibe con un MAC inválido."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2r","matchCriteriaId":"1FB0EC34-4625-4B2A-8AB9-0764D9D9E6BC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","matchCriteriaId":"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*","matchCriteriaId":"07C312A0-CD2C-4B9C-B064-6409B25C278F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.3","matchCriteriaId":"BD075607-09B7-493E-8611-66D041FFDA62"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*","versionStartIncluding":"9.5","matchCriteriaId":"0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*","matchCriteriaId":"B55E8D50-99B4-47EC-86F9-699B67D473CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:altavault:-:*:*:*:*:*:*:*","matchCriteriaId":"4E878102-1EA0-4D83-9F36-955DCF902211"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*","matchCriteriaId":"5C2089EE-5D7F-47EC-8EA5-0F69790564C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"62347994-1353-497C-9C4A-D5D8D95F67E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*","matchCriteriaId":"85DF4B3F-4BBC-42B7-B729-096934523D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*","matchCriteriaId":"A3C19813-E823-456A-B1CE-EC0684CE1953"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:hyper_converged_infrastructure:-:*:*:*:*:*:*:*","matchCriteriaId":"893C0367-DD1A-4754-B9E0-4944344108EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*","matchCriteriaId":"F1BE6C1F-2565-4E97-92AA-16563E5660A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:*:*:*","matchCriteriaId":"C18CA4B5-28FD-4199-B1F0-B1E59E920370"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:vsphere:*:*","matchCriteriaId":"EB2FB857-5F1F-46E5-A90C-AFB990BF1660"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_unified_manager_core_package:-:*:*:*:*:*:*:*","matchCriteriaId":"0A4D418D-B526-46B9-B439-E1963BF88C0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*","matchCriteriaId":"5735E553-9731-4AAC-BCFF-989377F817B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:ontap_select_deploy:-:*:*:*:*:*:*:*","matchCriteriaId":"7E968916-8CE0-4165-851F-14E37ECEA948"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*","matchCriteriaId":"E7CF3019-975D-40BB-A8A4-894E62BD3797"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"361B791A-D336-4431-8F68-8135BEFFAEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:service_processor:-:*:*:*:*:*:*:*","matchCriteriaId":"146A767F-DC04-454B-9913-17D3A2B5AAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"4BB0FDCF-3750-44C6-AC5C-0CC2AAD14093"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","matchCriteriaId":"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:unix:*:*","matchCriteriaId":"61D7EF01-F618-497F-9375-8003CEA3D380"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapdrive:-:*:*:*:*:windows:*:*","matchCriteriaId":"BEDE62C6-D571-4AF8-B85E-CBBCE4AF98B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapprotect:-:*:*:*:*:*:*:*","matchCriteriaId":"F74F467A-0C81-40D9-BA06-40FB8EF02C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*","matchCriteriaId":"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*","matchCriteriaId":"E94F7F59-1785-493F-91A7-5F5EA5E87E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*","matchCriteriaId":"7B7A6697-98CC-4E36-93DB-B7160F8399F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.0","versionEndIncluding":"9.0.4","matchCriteriaId":"D239B58A-9386-443D-B579-B56AE2A500BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*","matchCriteriaId":"8ADFF451-740F-4DBA-BD23-3881945D3E40"},{"vulnerable":true,"criteria":"cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*","matchCriteriaId":"AD7447BC-F315-4298-A822-549942FC118B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndIncluding":"12.1.5","matchCriteriaId":"6C3B5688-0235-4D4F-A26C-440FF24A1B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0.0","versionEndIncluding":"13.1.3","matchCriteriaId":"706316DC-8C24-4D9E-B7B4-F62CB52106B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.1.2","matchCriteriaId":"FCBAF5C1-3761-47BB-AD8E-A55A64D33AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndIncluding":"15.1.0","matchCriteriaId":"EFBB9E7C-08D1-4B30-AD3B-CADBF30D756B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndIncluding":"12.1.5","matchCriteriaId":"151ED6D1-AA85-4213-8F3A-8167CBEC4721"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0.0","versionEndIncluding":"13.1.3","matchCriteriaId":"BFA83D61-1A50-47F5-B9BE-15D672A6DDAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.1.2","matchCriteriaId":"925049D0-082E-4CED-9996-A55620A220CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndIncluding":"15.1.0","matchCriteriaId":"830028B5-9BAF-439C-8166-1053C0CB9836"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndIncluding":"12.1.5","matchCriteriaId":"5D5AA99B-08E7-4959-A3B4-41AA527B4B22"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0.0","versionEndIncluding":"13.1.3","matchCriteriaId":"22C64069-68D1-445F-B20D-FD1FF8DB0F71"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.1.2","matchCriteriaId":"6D87C038-B96D-4EA8-AB03-0401B2C9BB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndIncluding":"15.1.0","matchCriteriaId":"01BC2A57-030F-4A13-B584-BE2627EA3FE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndIncluding":"12.1.5","matchCriteriaId":"9DC86A5F-C793-4848-901F-04BFB57A07F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0.0","versionEndIncluding":"13.1.3","matchCriteriaId":"9CE03A8F-DAE1-4923-9741-DC89FA8A6FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.1.2","matchCriteriaId":"037C035C-9CFC-4224-8264-6132252D11FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndIncluding":"15.1.0","matchCriteriaId":"FD91F1A1-67F5-4547-848B-21664A9CC685"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndIncluding":"12.1.5","matchCriteriaId":"2E5552A3-91CD-4B97-AD33-4F1FB4C8827A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0.0","versionEndIncluding":"13.1.3","matchCriteriaId":"A7E616EB-F2F9-43BF-A23D-8FD0650DA85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.1.2","matchCriteriaId":"AE66A673-75EF-4AB3-AD4D-A1E70C7EFB08"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndIncluding":"15.1.0","matchCriteriaId":"10367A28-787A-4FAB-80AD-ADD67A751732"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndIncluding":"12.1.5","matchCriteriaId":"55C2EC23-E78F-4447-BACF-21FC36ABF155"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0.0","versionEndIncluding":"13.1.3","matchCriteriaId":"180D2770-61F3-4CFB-B5FA-1CF1796D4B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.1.2","matchCriteriaId":"46712630-407A-4E61-B62F-3AB156353A1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndIncluding":"15.1.0","matchCriteriaId":"21E18EA5-2210-41B1-87B0-55AB16514FE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndIncluding":"12.1.5","matchCriteriaId":"EFFCCCFF-8B66-4C8B-A99A-32964855EF98"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0.0","versionEndIncluding":"13.1.3","matchCriteriaId":"5D0BD10F-735D-4442-828B-0B90207ABEAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.1.2","matchCriteriaId":"448BB033-AE0F-46A0-8E98-3A6AE36EADAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndIncluding":"15.1.0","matchCriteriaId":"CC06609D-C362-4214-8487-2278161B5EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndIncluding":"12.1.5","matchCriteriaId":"945A19E8-51EB-42FE-9BF1-12DAC78B5286"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0.0","versionEndIncluding":"13.1.3","matchCriteriaId":"2008DD47-CC1D-430F-8478-E90617F5F998"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.1.2","matchCriteriaId":"DC39F6EE-478A-4638-B97D-3C25FD318F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndIncluding":"15.1.0","matchCriteriaId":"317C50A2-FE92-4C78-A94A-062274E6A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndIncluding":"12.1.5","matchCriteriaId":"EB5007D0-BBDB-4D74-9C88-98FBA74757D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0.0","versionEndIncluding":"13.1.3","matchCriteriaId":"389B6330-3041-4892-97D5-B5A6D9CE1487"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.1.2","matchCriteriaId":"5C556587-6963-49CF-8A2B-00431B386D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndIncluding":"15.1.0","matchCriteriaId":"D748001D-340C-45C4-A2D0-0575538C5CEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndIncluding":"12.1.5","matchCriteriaId":"B7725810-66D2-4460-A174-9F3BFAD966F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0.0","versionEndIncluding":"13.1.3","matchCriteriaId":"D7854954-A9A4-487B-B6C7-8DC1F83F4BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.1.2","matchCriteriaId":"572B1078-60C4-4A71-A0F4-2E2F4FBC4102"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndIncluding":"15.1.0","matchCriteriaId":"0371EB7C-3D41-4B8C-8FA9-DC6F42442448"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndIncluding":"12.1.5","matchCriteriaId":"EFD760FE-4347-4D36-B5C6-4009398060F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0.0","versionEndIncluding":"13.1.3","matchCriteriaId":"FB7588DA-75D3-4374-8871-D92E95509C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.1.2","matchCriteriaId":"C95403E8-A078-47E8-9B2F-F572D24C79EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndIncluding":"15.1.0","matchCriteriaId":"9C1BC0A8-5868-4FCA-80A5-661C3870EB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndIncluding":"12.1.5","matchCriteriaId":"65B76F53-7D8B-477E-8B6E-91AC0A9009FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0.0","versionEndIncluding":"13.1.3","matchCriteriaId":"E824BD72-428F-4A8D-ABE6-2A45EB9A4E3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.1.2","matchCriteriaId":"57A92EE2-FFC9-45C9-9454-7DFAB1F7EE11"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndIncluding":"15.1.0","matchCriteriaId":"0585424E-3F74-400E-8199-ED964317F89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1.0","versionEndIncluding":"12.1.5","matchCriteriaId":"69338CB1-B6E2-44E7-BEC1-6B9EAD560C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0.0","versionEndIncluding":"13.1.3","matchCriteriaId":"7A6CF6F4-D68A-45C3-A36E-A8B3AF61367F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.1.2","matchCriteriaId":"F2ADF37B-FCEB-4735-82D9-4241E3A4DE64"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndIncluding":"15.1.0","matchCriteriaId":"D7722F39-9B7E-4267-B757-B9570B039323"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.1.0","matchCriteriaId":"F37D18F2-8C6A-4557-85DC-2A751595423C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.1.0","matchCriteriaId":"C88B0206-093A-4A18-8322-A1CD1D4ACF2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:traffix_signaling_delivery_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.1.0","matchCriteriaId":"4E52F91D-3F39-4D89-8069-EC422FB1F700"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:traffix_signaling_delivery_controller:4.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3D71A781-FBD8-4084-8D9C-00D7B6ECB9A1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*","versionEndIncluding":"8.2.3","matchCriteriaId":"427DA624-2397-4A61-A2ED-23F5C22C174E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*","matchCriteriaId":"F1E78106-58E6-4D59-990F-75DA575BFAD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","matchCriteriaId":"B620311B-34A3-48A6-82DF-6F078D7A4493"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*","matchCriteriaId":"5F65DAB0-3DAD-49FF-BC73-3581CC3D5BF3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:cn1610_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"EB30733E-68FC-49C4-86C0-7FEE75C366BF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:cn1610:-:*:*:*:*:*:*:*","matchCriteriaId":"6361DAC6-600F-4B15-8797-D67F298F46FB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:a320_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6ADE5E80-06D3-4A1B-A655-FBB6CCA03939"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:a320:-:*:*:*:*:*:*:*","matchCriteriaId":"E8FD5E05-3C58-465F-9D4F-ECC2CD78DCFF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:c190_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"75A43965-CB2E-4C28-AFC3-1ADE7A6B845C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:c190:-:*:*:*:*:*:*:*","matchCriteriaId":"0D421A96-E6E9-4B27-ADE0-D8E87A82EEDE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:a220_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"4F2D2745-242C-4603-899E-70C9025BDDD2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:a220:-:*:*:*:*:*:*:*","matchCriteriaId":"EFB4541D-5EF7-4266-BFF3-2DDEC95E8012"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas2720_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"B7FD1DA9-7980-4643-B378-7095892DA176"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas2720:-:*:*:*:*:*:*:*","matchCriteriaId":"347E9E3E-941C-4109-B59F-B9BB05486B34"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas2750_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"AD661062-0D5B-4671-9D92-FEF8D7395C1E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas2750:-:*:*:*:*:*:*:*","matchCriteriaId":"8155BF5F-DD1B-4AB4-81F8-9BCE6A8821AE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:a800_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"B36CECA5-4545-49C2-92EB-B739407B207F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:a800:-:*:*:*:*:*:*:*","matchCriteriaId":"D8E7549A-DE35-4274-B3F6-22D51C7A6613"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*","matchCriteriaId":"D100F7CE-FC64-4CC6-852A-6136D72DA419"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","matchCriteriaId":"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","matchCriteriaId":"80F0FA5D-8D3B-4C0E-81E2-87998286AF33"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:agent:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.4","matchCriteriaId":"CBD9362E-F36F-4820-A29E-5BDDF6AC3ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:data_exchange_layer:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"6.0.0","matchCriteriaId":"02630E85-191E-4C58-B81B-4DAF93A26856"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:threat_intelligence_exchange_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"3.0.0","matchCriteriaId":"65D5476E-FBF9-474B-87E1-B6459E52736C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"9.0.0","matchCriteriaId":"DDD5E877-978C-4A16-B6C5-41A30D020B54"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_web_server:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E0F04157-FB34-4F22-B328-6BE1F2373DEE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"F4CFF558-3C47-480D-A2F0-BABF26042943"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6BBD7A51-0590-4DDF-8249-5AFA8D645CB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BB28F9AF-3D06-4532-B397-96D7E4792503"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5553591-073B-45E3-999F-21B8BA2EEE22"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"523CD57C-43D4-4C79-BA00-A9A65C6588E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"77C3DD16-1D81-40E1-B312-50FBD275507C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"81DAC8C0-D342-44B5-9432-6B88D389584F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A9317C01-22AA-452B-BBBF-5FAFFFB8BEA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:*","matchCriteriaId":"C4534CF9-D9FD-4936-9D8C-077387028A05"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:*","matchCriteriaId":"D60384BD-284C-4A68-9EEF-0FAFDF0C21F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3:*:*:*:*:*:*:*","matchCriteriaId":"CDA8DD5B-8A34-4CB3-B0FB-F82C73B25007"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E8B0-EDE5-4FE4-880C-766FAE1EA42C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D8EDA23C-7F75-4712-AF3F-B0E3597810B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_border_controller:7.4:*:*:*:*:*:*:*","matchCriteriaId":"5D139E52-0528-4D05-8502-1AB9AB10CA9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_border_controller:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1F59AE20-7B9D-47A5-9E0D-A73F4A0E7D34"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_border_controller:8.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1D4AF039-F3B6-45EB-A87E-8BCCF822AE23"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_border_controller:8.2:*:*:*:*:*:*:*","matchCriteriaId":"2B9F6415-2950-49FE-9CAF-8BCA4DB6DF4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_border_controller:8.3:*:*:*:*:*:*:*","matchCriteriaId":"C05190B9-237F-4E2E-91EA-DB1B738864AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_router:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D5D0F0C0-75EB-4685-A4CD-E58D1F2C6FDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_router:8.0:*:*:*:*:*:*:*","matchCriteriaId":"B59717B5-34D5-4C83-904A-884ED30DFC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_router:8.1:*:*:*:*:*:*:*","matchCriteriaId":"19BA6F25-B88A-42A1-A9E3-2DCF4E8F51A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_router:8.2:*:*:*:*:*:*:*","matchCriteriaId":"4E28B437-64A8-456C-98A1-4ADF5B6A2F60"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_router:8.3:*:*:*:*:*:*:*","matchCriteriaId":"2D705705-0D0D-468B-A140-C9A1B7A6CE6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_unified_session_manager:7.3.5:*:*:*:*:*:*:*","matchCriteriaId":"07BB35D4-9CCD-43D3-B482-E0BEB3BF2351"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_unified_session_manager:8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FB468FEE-A0F4-49A0-BBEE-10D0733C87D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:endeca_server:7.7.0:*:*:*:*:*:*:*","matchCriteriaId":"DB290045-2140-47EE-9BB4-35BAE8F1599C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:12.1.0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"98F3E643-4B65-4668-BB11-C61ED54D5A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"459B4A5F-A6BD-4A1C-B6B7-C979F005EB70"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CDCE0E90-495E-4437-8529-3C36441FB69D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*","matchCriteriaId":"AB654DFA-FEF9-4D00-ADB0-F3F2B6ACF13E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"37209C6F-EF99-4D21-9608-B3A06D283D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*","matchCriteriaId":"41684398-18A4-4DC6-B8A2-3EBAA0CBF9A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.3:*:*:*:*:*:*:*","matchCriteriaId":"83800E2F-804C-485D-A8FA-F4B32CDB4548"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"60BEB1C6-C279-4BB0-972C-BE28A6605C09"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*","matchCriteriaId":"0B1CAD50-749F-4ADB-A046-BF3585677A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndIncluding":"5.6.43","matchCriteriaId":"C637AC8A-F5F7-447E-A7F6-D6BA7AB45DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.25","matchCriteriaId":"CA988288-7D0C-4ADE-BE61-484D2D555A8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.15","matchCriteriaId":"0E106D13-CBF8-4A2C-8E89-A66C6EF5D408"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.8","matchCriteriaId":"DFBC7A65-3C0B-4B17-B087-250E69EE5B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.14","matchCriteriaId":"A443D73A-63BE-4D1F-B605-0F7D20915518"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.16","matchCriteriaId":"71CD99E7-3FE7-42E2-B480-7AA0E543340E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*","matchCriteriaId":"45CB30A1-B2C9-4BF5-B510-1F2F18B60C64"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*","matchCriteriaId":"D0A735B4-4F3C-416B-8C08-9CB21BAD2889"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","matchCriteriaId":"7E1E416B-920B-49A0-9523-382898C2979D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_global_desktop:5.4:*:*:*:*:*:*:*","matchCriteriaId":"B5265C91-FF5C-4451-A7C2-D388A65ACFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:services_tools_bundle:19.2:*:*:*:*:*:*:*","matchCriteriaId":"62DAD71E-A6D5-4CA9-A016-100F2D5114A6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndExcluding":"7.1.15","matchCriteriaId":"F457852F-D998-4BCF-99FE-09C6DFC8851A"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.20","matchCriteriaId":"ACA311D7-0ADC-497A-8A47-5AB864F201DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"8.1.0","versionEndExcluding":"8.1.8","matchCriteriaId":"0F57DBD8-DCA7-43FB-AC9E-6BDBB3EBE500"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.0.2","matchCriteriaId":"AD1987BB-8F42-48F0-8FE2-70ABD689F434"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.8.1","matchCriteriaId":"D107EC29-67E7-40C3-8E5A-324C9105C5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"6.9.0","versionEndExcluding":"6.17.0","matchCriteriaId":"FD2FB20C-EC88-4CD3-BC6E-1E65FAFADC36"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.8.1","matchCriteriaId":"74FB695D-2C76-47AB-988E-5629D2E695E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"8.9.0","versionEndExcluding":"8.15.1","matchCriteriaId":"A94F4836-1873-43F4-916E-9D9B302A053A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00019.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00047.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00049.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/107174","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2304","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2437","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2439","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2471","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3929","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3931","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9bbefbf0f24c57645e7ad6a5a71ae649d18ac8e","source":"openssl-security@openssl.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10282","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00003.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/201903-10","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190301-0001/","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190301-0002/","source":"openssl-security@openssl.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190423-0002/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/csp/article/K18549143","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/csp/article/K18549143?utm_source=f5support&amp%3Butm_medium=RSS","source":"openssl-security@openssl.org"},{"url":"https://usn.ubuntu.com/3899-1/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4376-2/","source":"openssl-security@openssl.org","tags":["Broken Link"]},{"url":"https://www.debian.org/security/2019/dsa-4400","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20190226.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2019-02","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2019-03","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/107174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9bbefbf0f24c57645e7ad6a5a71ae649d18ac8e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201903-10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190301-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190301-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190423-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/csp/article/K18549143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.f5.com/csp/article/K18549143?utm_source=f5support&amp%3Butm_medium=RSS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/3899-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4376-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.debian.org/security/2019/dsa-4400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20190226.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2019-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2019-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-1543","sourceIdentifier":"openssl-security@openssl.org","published":"2019-03-06T21:29:00.247","lastModified":"2026-06-17T02:28:43.290","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j)."},{"lang":"es","value":"ChaCha20-Poly1305 es un cifrado AEAD y requiere una entrada única para cada operación de cifrado. RFC 7539 especifica que el valor de nonce (IV) debe ser de 96 bits (12 bytes). OpenSSL permite una longitud de nonce variable y las almohadillas frontales del nonce con 0 bytes si es inferior a 12 bytes. Sin embargo, también permite incorrectamente que se establezca un nonce de hasta 16 bytes. En este caso, solo los últimos 12 bytes son significativos y los bytes iniciales adicionales se ignoran. Es un requisito de usar este cifrado que los valores de nonce son únicos. Los mensajes cifrados que utilizan un valor nonce reutilizado son susceptibles de graves ataques de confidencialidad e integridad. Si una aplicación cambia la longitud del nonce por defecto a más de 12 bytes y luego realiza un cambio a los bytes iniciales del nonce, esperando que el nuevo valor sea un nuevo nonce único, dicha aplicación podría encriptar inadvertidamente los mensajes con un nonce reutilizado. Además, los bytes ignorados en un nonce largo no están cubiertos por la garantía de integridad de este cifrado. Cualquier aplicación que se base en la integridad de estos bytes iniciales ignorados de un nonce largo puede verse afectada aún más. Cualquier uso interno de OpenSSL de este cifrado, incluido en SSL / TLS, es seguro porque dicho uso no establece un valor de referencia tan largo. Sin embargo, las aplicaciones de usuario que usan este cifrado directamente y establecen una longitud de nonce no predeterminada para que sea mayor a 12 bytes pueden ser vulnerables. Las versiones de OpenSSL 1.1.1 y 1.1.0 están afectadas por este problema. Debido al alcance limitado de las implementaciones afectadas, esto se ha evaluado como de baja gravedad y, por lo tanto, no estamos creando nuevas versiones en este momento. Corregido en OpenSSL 1.1.1c (Afectado 1.1.1-1.1.1b). Corregido en OpenSSL 1.1.0k (Afectado 1.1.0-1.1.0j)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b)","status":"affected"},{"version":"Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j)","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"},{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.0j","matchCriteriaId":"0466F5F7-8C7F-4A92-B114-8747FAF50EC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndIncluding":"1.1.1b","matchCriteriaId":"14FB3791-EE20-45C7-BD1B-69395131B8A9"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html","source":"openssl-security@openssl.org"},{"url":"https://access.redhat.com/errata/RHSA-2019:3700","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ee22257b1418438ebaf54df98af4e24f494d1809","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f426625b6ae9a7831010750490a5f0ad689c5ba3","source":"openssl-security@openssl.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10365","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","source":"openssl-security@openssl.org"},{"url":"https://seclists.org/bugtraq/2019/Jul/3","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2019/dsa-4475","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20190306.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"openssl-security@openssl.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2019:3700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ee22257b1418438ebaf54df98af4e24f494d1809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f426625b6ae9a7831010750490a5f0ad689c5ba3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/Jul/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2019/dsa-4475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20190306.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2019-0223","sourceIdentifier":"security@apache.org","published":"2019-04-23T16:29:00.467","lastModified":"2026-06-17T02:08:01.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS *even when configured to verify the peer certificate* while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic."},{"lang":"es","value":"Mientras investigábamos el error PROTON-2014, descubrimos que en algunas circunstancias las versiones de Apache Qpid Proton 0.9 a 0.27.0 (librería de C y sus adaptaciones de lenguaje) pueden conectarse a un peer de forma anónima utilizando TLS *incluso cuando está configurado para verificar el certificado del peer* mientras se utiliza con versiones de OpenSSL anteriores a la 1.1.0. Esto significa que un ataque man in the middle podría ser construido si un atacante puede interceptar el tráfico TLS."}],"affected":[{"source":"security@apache.org","affectedData":[{"vendor":"Apache Software Foundation","product":"Apache Qpid Proton","versions":[{"version":"0.9 to 0.27.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:qpid:*:*:*:*:*:*:*:*","versionStartIncluding":"0.9","versionEndIncluding":"0.27.0","matchCriteriaId":"EF9D1E83-264F-4FD3-91DC-7E5CC856C36D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_amq_clients_2:-:*:*:*:*:*:*:*","matchCriteriaId":"4A493C8B-B5B9-4BE2-A449-24BE131FF8D3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*","matchCriteriaId":"704CFA1A-953E-4105-BFBE-406034B83DED"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openstack:14:*:*:*:*:*:*:*","matchCriteriaId":"EB7F358B-5E56-41AB-BB8A-23D3CB7A248B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:6.3:*:*:*:*:*:*:*","matchCriteriaId":"87F6E32E-6AF3-489A-AFEF-D5309E0D1779"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:6.4:*:*:*:*:*:*:*","matchCriteriaId":"FB283C80-F7AF-4776-8432-655E50D7D65B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:satellite:6.5:*:*:*:*:*:*:*","matchCriteriaId":"D5B7C3FA-0F90-47ED-835F-FBA07B3993E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:*","matchCriteriaId":"967EC28A-607F-48F4-AD64-5E3041C768F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"AE1D81A1-CD24-4B17-8AFD-DC95E90AD7D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"807C024A-F8E8-4B48-A349-4C68CD252CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"F96E3779-F56A-45FF-BB3D-4980527D721E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9:*:*:*:*:*:*:*","matchCriteriaId":"92C9F1C4-55B0-426D-BB5E-01372C23AF97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*","matchCriteriaId":"AF83BB87-B203-48F9-9D06-48A5FE399050"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*","matchCriteriaId":"16E6D998-B41D-4B49-9E00-8336D2E40A4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"1C8D871B-AEA1-4407-AEE3-47EC782250FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"98381E61-F082-4302-B51F-5648884F998B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D99A687E-EAE6-417E-A88E-D0082BC194CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6755B6AD-0422-467B-8115-34A60B1D1A40"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*","matchCriteriaId":"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*","matchCriteriaId":"D5F7E11E-FB34-4467-8919-2B6BEAABF665"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2019/04/23/4","source":"security@apache.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/108044","source":"security@apache.org","tags":["Broken Link"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0886","source":"security@apache.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1398","source":"security@apache.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1399","source":"security@apache.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1400","source":"security@apache.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2777","source":"security@apache.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2778","source":"security@apache.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2779","source":"security@apache.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2780","source":"security@apache.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2781","source":"security@apache.org","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2782","source":"security@apache.org","tags":["Third Party Advisory"]},{"url":"https://issues.apache.org/jira/browse/PROTON-2014?page=com.atlassian.jira.plugin.system.issuetabpanels%3Aall-tabpanel","source":"security@apache.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/008ee5e78e5a090e1fcc5f6617f425e4e51d59f03d3eda2dd006df9f%40%3Cusers.qpid.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/3adb2f020f705b4fd453982992a68cd10f9d5ac728b699efdb73c1f5%40%3Cdev.qpid.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/49c83f0acce5ceaeffca51714ec2ba0f0199bcb8f99167181bba441b%40%3Cdev.qpid.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d%40%3Ccommits.qpid.apache.org%3E","source":"security@apache.org"},{"url":"https://lists.apache.org/thread.html/d9c9a882a292e2defaed1f954528c916fb64497ce57db652727e39b0%40%3Cannounce.apache.org%3E","source":"security@apache.org"},{"url":"http://www.openwall.com/lists/oss-security/2019/04/23/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/108044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://issues.apache.org/jira/browse/PROTON-2014?page=com.atlassian.jira.plugin.system.issuetabpanels%3Aall-tabpanel","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/008ee5e78e5a090e1fcc5f6617f425e4e51d59f03d3eda2dd006df9f%40%3Cusers.qpid.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/3adb2f020f705b4fd453982992a68cd10f9d5ac728b699efdb73c1f5%40%3Cdev.qpid.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/49c83f0acce5ceaeffca51714ec2ba0f0199bcb8f99167181bba441b%40%3Cdev.qpid.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/914424e4d798a340f523b6169aaf39b626971d9bb00fcdeb1d5d6c0d%40%3Ccommits.qpid.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/d9c9a882a292e2defaed1f954528c916fb64497ce57db652727e39b0%40%3Cannounce.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2019-12572","sourceIdentifier":"cve@mitre.org","published":"2019-06-21T18:15:09.857","lastModified":"2026-06-17T02:14:53.480","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client 1.0.2 (build 02363) for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. On startup, the PIA Windows service (pia-service.exe) loads the OpenSSL library from %PROGRAMFILES%\\Private Internet Access\\libeay32.dll. This library attempts to load the C:\\etc\\ssl\\openssl.cnf configuration file which does not exist. By default on Windows systems, authenticated users can create directories under C:\\. A low privileged user can create a C:\\etc\\ssl\\openssl.cnf configuration file to load a malicious OpenSSL engine library resulting in arbitrary code execution as SYSTEM when the service starts."},{"lang":"es","value":"Una vulnerabilidad en el Cliente VPN versión 1.0.2 (build 02363) de Media Private Internet Access (PIA) de London Trust para Windows, podría permitir a un atacante local autenticado ejecutar código arbitrario con privilegios elevados. En el inicio, el servicio Windows PIA (pia-service.exe) carga la biblioteca OpenSSL desde %PROGRAMFILES%\\Private Internet Access\\libeay32.dll. Esta biblioteca intenta cargar el archivo de configuración C:\\etc\\ssl\\openssl.cnf que no existe. Por defecto, en los sistemas Windows, los usuarios autenticados pueden crear directorios en C:\\. Un usuario poco privilegiado puede crear un archivo de configuración C:\\etc\\ssl\\openssl.cnf para cargar una biblioteca del motor OpenSSL maliciosa, que resulta en la ejecución de código arbitrario como SYSTEM cuando el servicio se inicia."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:londontrustmedia:private_internet_access:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"17C84453-C0B6-405B-91CD-EC82D9C10B56"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://blog.mirch.io/2019/06/10/cve-2019-12572-pia-windows-privilege-escalation-malicious-openssl-engine/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12572.txt","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://blog.mirch.io/2019/06/10/cve-2019-12572-pia-windows-privilege-escalation-malicious-openssl-engine/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12572.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-5443","sourceIdentifier":"support@hackerone.com","published":"2019-07-02T19:15:10.790","lastModified":"2026-10-14T07:16:54.880","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl \"engine\") on invocation. If that curl is invoked by a privileged user it can do anything it wants."},{"lang":"es","value":"Un usuario o programa no privilegiado puede colocar un código y un archivo de configuración en una ruta (path) no privilegiada conocida (bajo C:/usr/local/) que hará que curl anterior a versión 7.65.1 incluyéndola,  ejecute automáticamente el código en la invocación (como un \"engine\" openssl). Si ese curl es invocado por un usuario privilegiado, este puede hacer lo que desee."}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"n/a","product":"curl","versions":[{"version":"<= 7.65.1","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"support@hackerone.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*","versionEndIncluding":"7.65.1","matchCriteriaId":"22551EE7-6395-4539-981E-034E01D82A76"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*","matchCriteriaId":"AB654DFA-FEF9-4D00-ADB0-F3F2B6ACF13E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"37209C6F-EF99-4D21-9608-B3A06D283D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"DFC79B17-E9D2-44D5-93ED-2F959E7A3D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"AD04BEE5-E9A8-4584-A68C-0195CE9C402C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.7.27","matchCriteriaId":"52A7407B-96A0-4B45-A7EC-5D99A5828AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.17","matchCriteriaId":"B89DD070-1301-4EF9-B46E-7F7D7F2A7A0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oss_support_tools:20.0:*:*:*:*:*:*:*","matchCriteriaId":"8252A7F5-2FB5-4E73-864D-D11F21F5EC56"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*","matchCriteriaId":"F1BE6C1F-2565-4E97-92AA-16563E5660A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.3","matchCriteriaId":"6AADE2A6-B78C-4B9C-8FAB-58DB50F69D84"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vmware_vsphere:*:*","versionStartIncluding":"9.5","matchCriteriaId":"37C50706-4EB7-4AC0-BFE2-B3929F79B5D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*","matchCriteriaId":"5735E553-9731-4AAC-BCFF-989377F817B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","matchCriteriaId":"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2019/06/24/1","source":"support@hackerone.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/108881","source":"support@hackerone.com","tags":["Broken Link"]},{"url":"https://curl.haxx.se/docs/CVE-2019-5443.html","source":"support@hackerone.com","tags":["Patch","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20191017-0002/","source":"support@hackerone.com","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"support@hackerone.com","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"support@hackerone.com","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"support@hackerone.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2019/06/24/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/108881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://curl.haxx.se/docs/CVE-2019-5443.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20191017-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2019-1552","sourceIdentifier":"openssl-security@openssl.org","published":"2019-07-30T17:15:12.780","lastModified":"2026-06-17T02:28:44.723","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. This directory is most commonly referred to as OPENSSLDIR, and is configurable with the --prefix / --openssldir configuration options. For OpenSSL versions 1.1.0 and 1.1.1, the mingw configuration targets assume that resulting programs and libraries are installed in a Unix-like environment and the default prefix for program installation as well as for OPENSSLDIR should be '/usr/local'. However, mingw programs are Windows programs, and as such, find themselves looking at sub-directories of 'C:/usr/local', which may be world writable, which enables untrusted users to modify OpenSSL's default configuration, insert CA certificates, modify (or even replace) existing engine modules, etc. For OpenSSL 1.0.2, '/usr/local/ssl' is used as default for OPENSSLDIR on all Unix and Windows targets, including Visual C builds. However, some build instructions for the diverse Windows targets on 1.0.2 encourage you to specify your own --prefix. OpenSSL versions 1.1.1, 1.1.0 and 1.0.2 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s)."},{"lang":"es","value":"OpenSSL presenta valores predeterminados internos para un árbol de directorios donde puede encontrar un archivo de configuración, así como certificados utilizados para la comprobación en TLS. Este directorio se conoce más comúnmente como OPENSSLDIR, y se puede configurar con las opciones de configuración --prefix / --openssldir. Para las versiones 1.1.0 y 1.1.1 de OpenSSL, los destinos de configuración de mingw suponen que los programas y bibliotecas resultantes están instalados en un entorno similar a Unix y el prefijo predeterminado para la instalación del programa, así como para OPENSSLDIR debe ser “/usr/ local”. Sin embargo, los programas mingw son programas de Windows, y como tal, se encuentran buscando subdirectorios de “C:/usr/local”, que pueden ser grabables world, lo que permite a los usuarios no confiables modificar la configuración predeterminada de OpenSSL, insertar certificados de CA, modificar (o incluso reemplazar) los módulos de motor existentes, etc. Para OpenSSL versión 1.0.2, “/usr/local/ssl” se utiliza de por defecto para OPENSSLDIR en todos los Unix y Windows de destino, incluidas las compilaciones de Visual C. Sin embargo, algunas instrucciones de compilación para los diversos Windows de destino en la versión 1.0.2 le incentivan a especificar su propio --prefix. Las versiones 1.1.1, 1.1.0 y 1.0.2 de OpenSSL están afectadas por este problema. Debido al alcance limitado de las implementaciones afectadas, esto se ha evaluado como de baja gravedad y, por lo tanto, no estamos creando nuevas versiones en este momento. Corregido en OpenSSL versión 1.1.1d (versiones afectadas 1.1.1 hasta 1.1.1c). Corregido en OpenSSL versión 1.1.0l (versiones afectadas 1.1.0 hasta 1.1.0k). Corregido en OpenSSL versión 1.0.2t (versiones afectadas 1.0.2 hasta 1.0.2s)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c)","status":"affected"},{"version":"Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s)","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndIncluding":"1.0.2s","matchCriteriaId":"0DAC8B94-3674-4E4B-9BB0-A16CA0197885"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.0k","matchCriteriaId":"65728FC6-4B4F-4D43-872B-BE1133BB2281"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndIncluding":"1.1.1c","matchCriteriaId":"A2ACA227-3992-478E-85C3-023D8AF88A08"}]}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=54aa9d51b09d67e90db443f682cface795f5af9e","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=b15a19c148384e73338aa7c5b12652138e35ed28","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=d333ebaf9c77332754a9d5e111e2f53e1de54fdd","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e32bc855a81a2d48d215c506bdeb4f598045f7e9","source":"openssl-security@openssl.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10365","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20190823-0006/","source":"openssl-security@openssl.org"},{"url":"https://support.f5.com/csp/article/K94041354","source":"openssl-security@openssl.org"},{"url":"https://support.f5.com/csp/article/K94041354?utm_source=f5support&amp%3Butm_medium=RSS","source":"openssl-security@openssl.org"},{"url":"https://www.kb.cert.org/vuls/id/429301","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20190730.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2019-08","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2019-09","source":"openssl-security@openssl.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=54aa9d51b09d67e90db443f682cface795f5af9e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=b15a19c148384e73338aa7c5b12652138e35ed28","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=d333ebaf9c77332754a9d5e111e2f53e1de54fdd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e32bc855a81a2d48d215c506bdeb4f598045f7e9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20190823-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K94041354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K94041354?utm_source=f5support&amp%3Butm_medium=RSS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/429301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20190730.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2019-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2019-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2019-5592","sourceIdentifier":"psirt@fortinet.com","published":"2019-08-23T20:15:10.347","lastModified":"2026-06-17T02:37:54.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS engine version 5.000 to 5.006, 4.000 to 4.036, 4.200 to 4.219, 3.547 and below, when configured with SSL Deep Inspection policies and with the IPS sensor enabled, may allow an attacker to decipher TLS connections going through the FortiGate via monitoring the traffic in a Man-in-the-middle position."},{"lang":"es","value":"Múltiples vulnerabilidades de relleno de Oracle (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) en la implementación de relleno CBC de FortiOS IPS motor versión 5.000 a 5.006, 4.000 a 4.036, 4.200 a 4.219, 3.547 y menores, cuando se configura con políticas de inspección profunda SSL y con el sensor IPS habilitado puede permitir que un atacante descifre las conexiones TLS que atraviesan el FortiGate a través del monitoreo del tráfico en una posición de hombre en el medio."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"n/a","product":"Fortinet IPS Engine","versions":[{"version":"IPS engine version 5.000 to 5.006, 4.000 to 4.036, 4.200 to 4.219, 3.547 and below","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T13:59:49.317412Z","id":"CVE-2019-5592","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"3.00547","matchCriteriaId":"830DC4A3-9C25-4314-9F20-BB6075605D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*","versionStartIncluding":"4.00000","versionEndIncluding":"4.00036","matchCriteriaId":"4FB91C93-AFCA-4385-8999-71CB5BC1E6AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*","versionStartIncluding":"4.00200","versionEndIncluding":"4.00219","matchCriteriaId":"52FCCBD8-CD08-4C75-8029-740B1C452066"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortios_ips_engine:*:*:*:*:*:*:*:*","versionStartIncluding":"5.00000","versionEndIncluding":"5.00006","matchCriteriaId":"E01C21FE-03D3-4374-8017-7CA189E3ED5A"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-19-145","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-19-145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2016-10931","sourceIdentifier":"cve@mitre.org","published":"2019-08-26T12:15:11.327","lastModified":"2026-06-17T00:40:38.780","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification."},{"lang":"es","value":"Se detectó un problema en el paquete openssl versiones anteriores a 0.9.0 para Rust. Presenta una vulnerabilidad de tipo man-in-the-middle de SSL/TLS porque la comprobación del certificado está desactivada por defecto y no existe API para la comprobación del nombre del host."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rust-openssl_project:rust-openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.0","matchCriteriaId":"497B2FE9-7879-4848-95ED-175073FEB734"}]}]}],"references":[{"url":"https://rustsec.org/advisories/RUSTSEC-2016-0001.html","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2016-0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2018-20997","sourceIdentifier":"cve@mitre.org","published":"2019-08-26T18:15:11.670","lastModified":"2026-06-17T01:53:54.460","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing."},{"lang":"es","value":"Se descubrió un problema e el paquete openssl antes de 0.10.9 para Rust. Se produce un uso libre después de la firma de CMS."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rust-openssl_project:rust-openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"0.10.9","matchCriteriaId":"4A9A7BBF-D185-4C6B-AE3A-87029B9C99FE"}]}]}],"references":[{"url":"https://rustsec.org/advisories/RUSTSEC-2018-0010.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2018-0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-2390","sourceIdentifier":"cna@mongodb.com","published":"2019-08-30T15:15:11.050","lastModified":"2026-06-17T02:33:44.760","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server to run attacker defined code as the user running the utility. This issue MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14 and MongoDB Server v3.4 prior to 3.4.22."},{"lang":"es","value":"Un usuario o programa sin privilegios en Microsoft Windows que puede crear archivos de configuración de OpenSSL en una ubicación fija puede hacer que los programas de utilidades enviados con el servidor de MongoDB ejecuten código definido por el atacante como el usuario que ejecuta la utilidad. Este problema afecta: MongoDB Inc. Servidor MongoDB versiones 4.0 anteriores a la versión 4.0.11; versiones 3.6 anteriores a la versión 3.6.14; versiones 3.4 anteriores a la versión 3.4.22."}],"affected":[{"source":"cna@mongodb.com","affectedData":[{"vendor":"MongoDB Inc.","product":"MongoDB Server","defaultStatus":"unaffected","versions":[{"version":"4.0","lessThan":"4.0.11","versionType":"custom","status":"affected"},{"version":"3.6","lessThan":"3.6.14","versionType":"custom","status":"affected"},{"version":"3.4","lessThan":"3.4.22","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cna@mongodb.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"cna@mongodb.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.22","matchCriteriaId":"56AB583F-49FA-4EBD-A1CD-EB9A0853F8F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.14","matchCriteriaId":"592F0633-F2FC-4FAF-8C70-9A97AA74C240"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.11","matchCriteriaId":"9ABE44AB-F309-4248-B319-91E184B7FABF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://jira.mongodb.org/browse/SERVER-42233","source":"cna@mongodb.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://jira.mongodb.org/browse/SERVER-42233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-1547","sourceIdentifier":"openssl-security@openssl.org","published":"2019-09-10T17:15:11.750","lastModified":"2026-06-17T02:28:43.530","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is possible that such a group does not have the cofactor present. This can occur even where all the parameters match a known named curve. If such a curve is used then OpenSSL falls back to non-side channel resistant code paths which may result in full key recovery during an ECDSA signature operation. In order to be vulnerable an attacker would have to have the ability to time the creation of a large number of signatures where explicit parameters with no co-factor present are in use by an application using libcrypto. For the avoidance of doubt libssl is not vulnerable because explicit parameters are never used. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s)."},{"lang":"es","value":"Normalmente en los grupos EC de OpenSSL siempre tienen un cofactor presente y este es usado en rutas de código resistentes a canales laterales. Sin embargo, en ciertos casos, es posible construir un grupo usando parámetros explícitos (en lugar de usar una curva nombrada). En esos casos, es posible que dicho grupo no tenga el cofactor presente. Esto puede ocurrir incluso cuando todos los parámetros coinciden con una curva de nombre conocido. Si es utilizada dicha curva, entonces OpenSSL recurre a rutas de código resistentes a canales no laterales lo que puede resultar en una recuperación de clave completa durante una operación de firma ECDSA. Para que sea vulnerable, un atacante tendría que tener la capacidad de cronometrar la creación de un gran número de firmas donde parámetros explícitos sin cofactor presente están en uso mediante una aplicación que utiliza libcrypto. Para evitar dudas, libssl no es vulnerable porque nunca se utilizan parámetros explícitos. Corregido en OpenSSL versión 1.1.1d (afectada la versión 1.1.1-1.1.1c). Corregido en OpenSSL versión 1.1.0l (afectada la versión 1.1.0-1.1.0k). Corregida en OpenSSL versión 1.0.2t (afectada la versión 1.0.2-1.0.2s)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c)","status":"affected"},{"version":"Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","baseScore":1.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-19T19:04:18.544630Z","id":"CVE-2019-1547","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndIncluding":"1.0.2s","matchCriteriaId":"0DAC8B94-3674-4E4B-9BB0-A16CA0197885"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.0k","matchCriteriaId":"65728FC6-4B4F-4D43-872B-BE1133BB2281"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndIncluding":"1.1.1c","matchCriteriaId":"A2ACA227-3992-478E-85C3-023D8AF88A08"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html","source":"openssl-security@openssl.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html","source":"openssl-security@openssl.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html","source":"openssl-security@openssl.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html","source":"openssl-security@openssl.org"},{"url":"http://packetstormsecurity.com/files/154467/Slackware-Security-Advisory-openssl-Updates.html","source":"openssl-security@openssl.org"},{"url":"https://arxiv.org/abs/1909.01785","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=21c856b75d81eff61aa63b4f036bb64a85bf6d46","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30c22fa8b1d840036b8e203585738df62a03cec8","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7c1709c2da5414f5b6133d00a03fc8c5bf996c7a","source":"openssl-security@openssl.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10365","source":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00026.html","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/","source":"openssl-security@openssl.org"},{"url":"https://seclists.org/bugtraq/2019/Oct/0","source":"openssl-security@openssl.org"},{"url":"https://seclists.org/bugtraq/2019/Oct/1","source":"openssl-security@openssl.org"},{"url":"https://seclists.org/bugtraq/2019/Sep/25","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201911-04","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20190919-0002/","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20200122-0002/","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20200416-0003/","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"openssl-security@openssl.org"},{"url":"https://support.f5.com/csp/article/K73422160?utm_source=f5support&amp%3Butm_medium=RSS","source":"openssl-security@openssl.org"},{"url":"https://usn.ubuntu.com/4376-1/","source":"openssl-security@openssl.org"},{"url":"https://usn.ubuntu.com/4376-2/","source":"openssl-security@openssl.org"},{"url":"https://usn.ubuntu.com/4504-1/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2019/dsa-4539","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2019/dsa-4540","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20190910.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2019-08","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2019-09","source":"openssl-security@openssl.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/154467/Slackware-Security-Advisory-openssl-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://arxiv.org/abs/1909.01785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=21c856b75d81eff61aa63b4f036bb64a85bf6d46","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30c22fa8b1d840036b8e203585738df62a03cec8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7c1709c2da5414f5b6133d00a03fc8c5bf996c7a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/Oct/0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/Oct/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/Sep/25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201911-04","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20190919-0002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20200122-0002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20200416-0003/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K73422160?utm_source=f5support&amp%3Butm_medium=RSS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4376-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4376-2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4504-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2019/dsa-4539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2019/dsa-4540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20190910.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2019-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2019-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2019-1549","sourceIdentifier":"openssl-security@openssl.org","published":"2019-09-10T17:15:11.813","lastModified":"2026-06-17T02:28:43.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. A partial mitigation for this issue is that the output from a high precision timer is mixed into the RNG state so the likelihood of a parent and child process sharing state is significantly reduced. If an application already calls OPENSSL_init_crypto() explicitly using OPENSSL_INIT_ATFORK then this problem does not occur at all. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c)."},{"lang":"es","value":"OpenSSL versión 1.1.1 introdujo un generador de números aleatorios (RNG) reescrito. Este tuvo la intención de incluir protección en el caso de una llamada de sistema fork() para asegurar que los procesos padre e hijo no compartieran el mismo estado RNG. Sin embargo, esta protección no estaba siendo usada en el caso predeterminado. Una mitigación parcial para este problema es que la salida de un temporizador de alta precisión se mezcla en el estado RNG, por lo que la probabilidad de un estado de intercambio de procesos padre e hijo es reducida significativamente. Si una aplicación ahora llama a OPENSSL_init_crypto() explícitamente utilizando OPENSSL_INIT_ATFORK, este problema no se produce en absoluto. Corregido en OpenSSL versión 1.1.1d (afectadas las versiones 1.1.1 hasta 1.1.1c)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndIncluding":"1.1.1c","matchCriteriaId":"A2ACA227-3992-478E-85C3-023D8AF88A08"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1b0fe00e2704b5e20334a16d3c9099d1ba2ef1be","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/","source":"openssl-security@openssl.org"},{"url":"https://seclists.org/bugtraq/2019/Oct/1","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20190919-0002/","source":"openssl-security@openssl.org"},{"url":"https://support.f5.com/csp/article/K44070243","source":"openssl-security@openssl.org"},{"url":"https://support.f5.com/csp/article/K44070243?utm_source=f5support&amp%3Butm_medium=RSS","source":"openssl-security@openssl.org"},{"url":"https://usn.ubuntu.com/4376-1/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2019/dsa-4539","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20190910.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1b0fe00e2704b5e20334a16d3c9099d1ba2ef1be","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/Oct/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20190919-0002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K44070243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K44070243?utm_source=f5support&amp%3Butm_medium=RSS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4376-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2019/dsa-4539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20190910.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2019-1563","sourceIdentifier":"openssl-security@openssl.org","published":"2019-09-10T17:15:11.890","lastModified":"2026-10-08T22:16:52.290","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption key or decrypt any RSA encrypted message that was encrypted with the public RSA key, using a Bleichenbacher padding oracle attack. Applications are not affected if they use a certificate together with the private RSA key to the CMS_decrypt or PKCS7_decrypt functions to select the correct recipient info to decrypt. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s)."},{"lang":"es","value":"En situaciones donde un atacante recibe una notificación automática del éxito o el fracaso de un intento de descifrado, un atacante, luego de enviar una gran número de mensajes para descifrar, puede recuperar una clave de cifrado transportada de CMS/PKCS7 o descifrar cualquier mensaje cifrado de RSA que se cifró con la clave pública de RSA, utilizando un ataque de tipo padding oracle de Bleichenbacher. Las aplicaciones no están afectadas si usan un certificado junto con la clave RSA privada para las funciones CMS_decrypt o PKCS7_decrypt para seleccionar la información correcta del destinatario a descifrar. Corregido en OpenSSL versión 1.1.1d (afectada la versión 1.1.1-1.1.1c). Corregido en OpenSSL versión 1.1.0l (afectada la versión 1.1.0-1.1.0k). Corregido en OpenSSL versión 1.0.2t (afectada la versión 1.0.2-1.0.2s)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c)","status":"affected"},{"version":"Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-08T21:10:41.616859Z","id":"CVE-2019-1563","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"},{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndIncluding":"1.0.2s","matchCriteriaId":"0DAC8B94-3674-4E4B-9BB0-A16CA0197885"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndIncluding":"1.1.0k","matchCriteriaId":"65728FC6-4B4F-4D43-872B-BE1133BB2281"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndIncluding":"1.1.1c","matchCriteriaId":"A2ACA227-3992-478E-85C3-023D8AF88A08"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html","source":"openssl-security@openssl.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html","source":"openssl-security@openssl.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html","source":"openssl-security@openssl.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html","source":"openssl-security@openssl.org"},{"url":"http://packetstormsecurity.com/files/154467/Slackware-Security-Advisory-openssl-Updates.html","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=08229ad838c50f644d7e928e2eef147b4308ad64","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=631f94db0065c78181ca9ba5546ebc8bb3884b97","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e21f8cf78a125cd3c8c0d1a1a6c8bb0b901f893f","source":"openssl-security@openssl.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10365","source":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00026.html","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/","source":"openssl-security@openssl.org"},{"url":"https://seclists.org/bugtraq/2019/Oct/0","source":"openssl-security@openssl.org"},{"url":"https://seclists.org/bugtraq/2019/Oct/1","source":"openssl-security@openssl.org"},{"url":"https://seclists.org/bugtraq/2019/Sep/25","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/201911-04","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20190919-0002/","source":"openssl-security@openssl.org"},{"url":"https://support.f5.com/csp/article/K97324400?utm_source=f5support&amp%3Butm_medium=RSS","source":"openssl-security@openssl.org"},{"url":"https://usn.ubuntu.com/4376-1/","source":"openssl-security@openssl.org"},{"url":"https://usn.ubuntu.com/4376-2/","source":"openssl-security@openssl.org"},{"url":"https://usn.ubuntu.com/4504-1/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2019/dsa-4539","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2019/dsa-4540","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20190910.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2019-09","source":"openssl-security@openssl.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/154467/Slackware-Security-Advisory-openssl-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=08229ad838c50f644d7e928e2eef147b4308ad64","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=631f94db0065c78181ca9ba5546ebc8bb3884b97","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e21f8cf78a125cd3c8c0d1a1a6c8bb0b901f893f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/Oct/0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/Oct/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/Sep/25","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201911-04","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20190919-0002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K97324400?utm_source=f5support&amp%3Butm_medium=RSS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4376-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4376-2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4504-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2019/dsa-4539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2019/dsa-4540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20190910.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2019-09","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2019-10211","sourceIdentifier":"secalert@redhat.com","published":"2019-10-29T19:15:16.487","lastModified":"2026-06-17T02:10:29.917","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL executing code from unprotected directory."},{"lang":"es","value":"El instalador de Postgresql Windows anterior a las versiones 11.5, 10.10, 9.6.15, 9.5.19 y 9.4.24, es vulnerable por medio del código de ejecución de OpenSSL integrado desde un directorio desprotegido"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"PostgreSQL","product":"postgresql","versions":[{"version":"all 11.x before 11.5","status":"affected"},{"version":"all 10.x before 10.10","status":"affected"},{"version":"all 9.6.x before 9.6.15","status":"affected"},{"version":"all 9.5.x before 9.5.19","status":"affected"},{"version":"all 9.4.x before 9.4.24","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV30":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionEndExcluding":"9.4.24","matchCriteriaId":"33B080BE-0A55-4646-9DAE-F3ABB993F7CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"9.5.0","versionEndExcluding":"9.5.19","matchCriteriaId":"F17B1734-0D92-4434-9F41-069AE7AE6EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"9.6.0","versionEndExcluding":"9.6.15","matchCriteriaId":"52AAE645-3756-47F8-8A58-29444E39F963"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0","versionEndExcluding":"10.10","matchCriteriaId":"844BDD2B-4EBC-4F1D-ABE7-5D8ED01F519B"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0","versionEndExcluding":"11.5","matchCriteriaId":"5D4F2F01-FAA1-418D-8FD7-CAABA183BB19"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10211","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.postgresql.org/about/news/1960/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.postgresql.org/about/news/1960/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2010-2450","sourceIdentifier":"cve@mitre.org","published":"2019-11-07T21:15:10.317","lastModified":"2026-06-16T23:20:46.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting file itself, so the generated private key is world readable by default."},{"lang":"es","value":"El script keygen.sh en Shibboleth SP 2.0 (ubicado en /usr/local/etc/shibboleth por defecto) utiliza OpenSSL para crear una clave privada DES que es colocada en el archivo sp-key.pm. Se basa en la umask root (predeterminado 22) en lugar de chmoding del archivo resultante en sí mismo, por lo que la clave privada generada es de tipo world readable por defecto."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"CWE-916"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shibboleth:service_provider:2.0:*:*:*:*:*:*:*","matchCriteriaId":"70EBED43-4EED-41E6-8E80-F05EBA42A2BE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]}],"references":[{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=571631","source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-2450","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://todos.internet2.edu/browse/SSPCPP-106","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=571631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-2450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://todos.internet2.edu/browse/SSPCPP-106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2011-4121","sourceIdentifier":"secalert@redhat.com","published":"2019-11-26T05:15:13.960","lastModified":"2026-06-16T23:34:27.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used for private RSA key generation. A remote attacker could use this flaw to bypass or corrupt integrity of services, depending on strong private RSA keys generation mechanism."},{"lang":"es","value":"La extensión OpenSSL de Ruby (Git trunk) versiones posteriores al 01-09-2011 hasta el 03-11-2011, siempre generó un valor de exponente de \"1\" para ser usado para la generación de claves RSA privadas. Un atacante remoto podría usar este fallo para omitir o dañar la integridad de los servicios, dependiendo de un mecanismo de generación de claves RSA privadas fuerte."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL extension of Ruby (Git trunk)","versions":[{"version":"versions after 2011-09-01 up to 2011-11-03","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"1.8.7.334","versionEndExcluding":"1.9.3","matchCriteriaId":"1DDD1CC4-D142-444E-B0A8-8A6F7063F116"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2013/07/01/1","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://access.redhat.com/security/cve/cve-2011-4121","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4121","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-4121","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2013/07/01/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://access.redhat.com/security/cve/cve-2011-4121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-4121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2015-1855","sourceIdentifier":"secalert@redhat.com","published":"2019-11-29T21:15:10.807","lastModified":"2026-06-17T00:23:07.280","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters."},{"lang":"es","value":"La función Verified_certificate_identity en la extensión OpenSSL en Ruby versiones anteriores a 2.0.0 patchlevel 645, versiones 2.1.x anteriores a 2.1.6 y versiones 2.2.x anteriores 2.2.2, no comprueba apropiadamente los nombres de host, lo que permite a atacantes remotos falsificar servidores por medio de vectores relacionados con (1) múltiples wildcards, (1) wildcards en nombres IDNA, (3) sensibilidad a mayúsculas y minúsculas y (4) caracteres no ASCII."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"Ruby","product":"Ruby","versions":[{"version":"before 2.0.0 patchlevel 645","status":"affected"},{"version":"2.1.x before 2.1.6","status":"affected"},{"version":"and 2.2.x before 2.2.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"2.1.0","versionEndExcluding":"2.1.6","matchCriteriaId":"C5793852-ECE3-465A-B8A5-D506744191E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.2","matchCriteriaId":"4E69BA95-2D84-4E80-9617-3B2F2B02D9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:-:*:*:*:*:*:*","matchCriteriaId":"45B882EE-85F9-42B0-85F3-0B6A9FF4BA5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p0:*:*:*:*:*:*","matchCriteriaId":"D2423B85-0971-42AC-8B64-819008BC5778"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:*","matchCriteriaId":"1C663278-3B2A-4B7C-959A-2AA804467F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p247:*:*:*:*:*:*","matchCriteriaId":"B7927149-A76A-48BC-8405-7375FC7D7486"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p353:*:*:*:*:*:*","matchCriteriaId":"3D627638-64AA-455B-9FEA-093D3773B9FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p451:*:*:*:*:*:*","matchCriteriaId":"46485519-C2FB-4767-B699-9F51FDCF29E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p481:*:*:*:*:*:*","matchCriteriaId":"19CF27FB-DCF5-4533-B309-55615AE21A63"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p576:*:*:*:*:*:*","matchCriteriaId":"B9865DD1-F2AF-40B6-848A-EA9FD37034DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p594:*:*:*:*:*:*","matchCriteriaId":"C10BD21E-B9FA-4B57-B617-0108A00D6132"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p598:*:*:*:*:*:*","matchCriteriaId":"3D5ABD47-64AC-4844-B78B-F0D3BC3B8F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:ruby:2.0.0:p643:*:*:*:*:*:*","matchCriteriaId":"4EF7FDAD-9CAF-452D-B229-EF7C390DE712"},{"vulnerable":true,"criteria":"cpe:2.3:a:ruby-lang:trunk:*:*:*:*:*:*:*:*","versionEndExcluding":"50292","matchCriteriaId":"4A56FC0D-59AE-48DD-9DD8-3CC0E6DC0F80"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:puppet:puppet_agent:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DCB7E6DC-B6C3-452B-98F7-09D0CE0879E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.8.0","matchCriteriaId":"82B0F981-35E1-4C9D-9D16-DDB0CA341FEF"}]}]}],"references":[{"url":"http://www.debian.org/security/2015/dsa-3245","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3246","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3247","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugs.ruby-lang.org/issues/9644","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://puppetlabs.com/security/cve/cve-2015-1855","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.ruby-lang.org/issues/9644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://puppetlabs.com/security/cve/cve-2015-1855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.ruby-lang.org/en/news/2015/04/13/ruby-openssl-hostname-matching-vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2019-19269","sourceIdentifier":"cve@mitre.org","published":"2019-11-30T23:15:18.223","lastModified":"2026-06-17T02:26:24.153","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. A dereference of a NULL pointer may occur. This pointer is returned by the OpenSSL sk_X509_REVOKED_value() function when encountering an empty CRL installed by a system administrator. The dereference occurs when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup."},{"lang":"es","value":"Se detectó un problema en tls_verify_crl en ProFTPD versiones hasta 1.3.6b. Se puede presentar una desreferencia de un puntero NULL. Este puntero es devuelto por la función sk_X509_REVOKED_value() de OpenSSL cuando encuentra una CRL vacía instalada mediante un administrador del sistema. La desreferencia se presenta cuando se comprueba el certificado de un cliente que conecta al servidor en una configuración de autenticación mutua cliente/servidor TLS."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.5e","matchCriteriaId":"9489E448-D5B8-4A38-99CE-C472EA881D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.3.6:-:*:*:*:*:*:*","matchCriteriaId":"47526BA5-3955-43B3-8EA4-5C29DDA3F9C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.3.6:alpha:*:*:*:*:*:*","matchCriteriaId":"7FC30FC2-1DEB-4CA7-922C-EA94E895E978"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.3.6:beta:*:*:*:*:*:*","matchCriteriaId":"1F41C633-216D-4A8C-BAA6-940452751735"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.3.6:rc1:*:*:*:*:*:*","matchCriteriaId":"B6475817-8CC7-4C0C-A9A6-E58189852DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.3.6:rc2:*:*:*:*:*:*","matchCriteriaId":"84CB8C28-C432-4FD4-9B76-CA6C2C8824D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.3.6:rc3:*:*:*:*:*:*","matchCriteriaId":"21D053B1-AFDE-4859-ACFB-C51DC28EAA04"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.3.6:rc4:*:*:*:*:*:*","matchCriteriaId":"AA9A0785-FF92-4AB0-8F42-9060FB24120E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","matchCriteriaId":"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","matchCriteriaId":"80F0FA5D-8D3B-4C0E-81E2-87998286AF33"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.html","source":"cve@mitre.org"},{"url":"https://github.com/proftpd/proftpd/issues/861","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00039.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGBBCPLJSDPFG5EI5P5G7P4KEX7YSD5G/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QR65XUHPCRU3NXTSFVF2J4GWRIHC7AHW/","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/202003-35","source":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/proftpd/proftpd/issues/861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00039.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGBBCPLJSDPFG5EI5P5G7P4KEX7YSD5G/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QR65XUHPCRU3NXTSFVF2J4GWRIHC7AHW/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202003-35","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2019-1551","sourceIdentifier":"openssl-security@openssl.org","published":"2019-12-06T18:15:12.840","lastModified":"2026-10-08T22:16:51.970","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t)."},{"lang":"es","value":"Hay un error de desbordamiento en el procedimiento de cuadratura Montgomery x64_64 utilizado en exponenciación con módulos de 512 bits. No hay algoritmos EC afectados. El análisis sugiere que los ataques contra 2-prime RSA1024, 3-prime RSA1536 y DSA1024 como resultado de este defecto serían muy difíciles de realizar y no se cree probable. Los ataques contra DH512 se consideran simplemente factibles. Sin embargo, para un ataque, el objetivo tendría que reutilizar la clave privada DH512, que de todos modos no se recomienda. También las aplicaciones que usan directamente la API de bajo nivel BN_mod_exp pueden verse afectadas si usan BN_FLG_CONSTTIME. Corregido en OpenSSL 1.1.1e (afectado 1.1.1-1.1.1d). Corregido en OpenSSL 1.0.2u (afectado 1.0.2-1.0.2t)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-08T21:04:33.478229Z","id":"CVE-2019-1551","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndIncluding":"1.0.2t","matchCriteriaId":"CB593B7C-3D0B-4A2B-BB53-DB2708983D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndIncluding":"1.1.1d","matchCriteriaId":"2D3BF86F-708B-49E5-B8A3-C56C977D3232"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","matchCriteriaId":"B620311B-34A3-48A6-82DF-6F078D7A4493"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B095CC03-7077-4A58-AB25-CC5380CDCE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.12","matchCriteriaId":"9A3BBE71-CA00-4F54-9210-FC7572C87CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.20","matchCriteriaId":"73573516-EDA0-4176-A3ED-2F7006C87F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*","matchCriteriaId":"D0A735B4-4F3C-416B-8C08-9CB21BAD2889"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","matchCriteriaId":"7E1E416B-920B-49A0-9523-382898C2979D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*","matchCriteriaId":"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*","matchCriteriaId":"A31C8344-3E02-4EB8-8BD8-4C84B7959624"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","matchCriteriaId":"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","matchCriteriaId":"80F0FA5D-8D3B-4C0E-81E2-87998286AF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","matchCriteriaId":"36D96259-24BD-44E2-96D9-78CE1D41F956"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.9","matchCriteriaId":"4ACF85D6-6B45-43DA-9C01-F0208186F014"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98","source":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/","source":"openssl-security@openssl.org"},{"url":"https://seclists.org/bugtraq/2019/Dec/39","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://seclists.org/bugtraq/2019/Dec/46","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202004-10","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20191210-0001/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4376-1/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4504-1/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2019/dsa-4594","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4855","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20191206.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2019-09","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2020-03","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2020-11","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-10","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/Dec/39","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://seclists.org/bugtraq/2019/Dec/46","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202004-10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20191210-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4376-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4504-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2019/dsa-4594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20191206.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2019-09","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2020-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2020-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-7041","sourceIdentifier":"cve@mitre.org","published":"2020-02-27T18:15:11.483","lastModified":"2026-06-17T03:24:10.820","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error code is interpreted as a successful return value."},{"lang":"es","value":"Se detectó un problema en openfortivpn versión 1.11.0, cuando se usaba con OpenSSL versiones 1.0.2 o posteriores, el archivo tunnel.c maneja inapropiadamente la comprobación del certificado porque un código de error negativo de X509_check_host se interpreta como un valor de retorno exitoso."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openfortivpn_project:openfortivpn:*:*:*:*:*:*:*:*","versionEndExcluding":"1.12.0","matchCriteriaId":"9676ABA1-E073-4E5E-A583-9661F9220F98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"D105A942-579A-465F-A1D4-76DDF33440E6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","matchCriteriaId":"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","matchCriteriaId":"80F0FA5D-8D3B-4C0E-81E2-87998286AF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","matchCriteriaId":"36D96259-24BD-44E2-96D9-78CE1D41F956"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*","matchCriteriaId":"40513095-7E6E-46B3-B604-C926F1BA3568"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","matchCriteriaId":"B620311B-34A3-48A6-82DF-6F078D7A4493"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00009.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00011.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/commit/60660e00b80bad0fadcf39aee86f6f8756c94f91","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/issues/536","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKNKSGBVYGRRVRLFEFBEKUEJYJR5LWOF/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FF6HYIBREQGATRM5COF57MRQWKOKCWZ3/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SRVVNXCNTNMPCIAZIVR4FAGYCSU53FNA/","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/commit/60660e00b80bad0fadcf39aee86f6f8756c94f91","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/issues/536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKNKSGBVYGRRVRLFEFBEKUEJYJR5LWOF/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FF6HYIBREQGATRM5COF57MRQWKOKCWZ3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SRVVNXCNTNMPCIAZIVR4FAGYCSU53FNA/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2020-7042","sourceIdentifier":"cve@mitre.org","published":"2020-02-27T18:15:11.547","lastModified":"2026-06-17T03:24:10.973","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outcome is that a valid certificate is never accepted (only a malformed certificate may be accepted)."},{"lang":"es","value":"Se detectó un problema en openfortivpn versión 1.11.0, cuando se usaba con OpenSSL versiones 1.0.2 o posteriores, en el archivo tunnel.c, maneja inapropiadamente la comprobación del certificado porque la verificación del nombre de host funciona en la memoria no inicializada. El resultado es que un certificado válido nunca es aceptado (solo puede ser aceptado un certificado malformado)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"},{"lang":"en","value":"CWE-908"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openfortivpn_project:openfortivpn:*:*:*:*:*:*:*:*","versionEndExcluding":"1.12.0","matchCriteriaId":"9676ABA1-E073-4E5E-A583-9661F9220F98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"D105A942-579A-465F-A1D4-76DDF33440E6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","matchCriteriaId":"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","matchCriteriaId":"80F0FA5D-8D3B-4C0E-81E2-87998286AF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","matchCriteriaId":"36D96259-24BD-44E2-96D9-78CE1D41F956"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*","matchCriteriaId":"40513095-7E6E-46B3-B604-C926F1BA3568"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","matchCriteriaId":"B620311B-34A3-48A6-82DF-6F078D7A4493"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00009.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00011.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/commit/9eee997d599a89492281fc7ffdd79d88cd61afc3","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/issues/536","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKNKSGBVYGRRVRLFEFBEKUEJYJR5LWOF/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FF6HYIBREQGATRM5COF57MRQWKOKCWZ3/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SRVVNXCNTNMPCIAZIVR4FAGYCSU53FNA/","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/commit/9eee997d599a89492281fc7ffdd79d88cd61afc3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/issues/536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKNKSGBVYGRRVRLFEFBEKUEJYJR5LWOF/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FF6HYIBREQGATRM5COF57MRQWKOKCWZ3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SRVVNXCNTNMPCIAZIVR4FAGYCSU53FNA/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2020-7043","sourceIdentifier":"cve@mitre.org","published":"2020-02-27T18:15:11.623","lastModified":"2026-06-17T03:24:11.123","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider '\\0' characters, as demonstrated by a good.example.com\\x00evil.example.com attack."},{"lang":"es","value":"Se detectó un problema en openfortivpn versión 1.11.0, cuando se usaba con OpenSSL versiones anteriores a 1.0.2. en el archivo tunnel.c maneja inapropiadamente la comprobación del certificado porque las comparaciones hostname no consideran los caracteres \"\\0\",  como es demostrado por un ataque de good.example.com\\x00evil.example.com."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openfortivpn_project:openfortivpn:*:*:*:*:*:*:*:*","versionEndExcluding":"1.12.0","matchCriteriaId":"9676ABA1-E073-4E5E-A583-9661F9220F98"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.2","matchCriteriaId":"D53A6288-46D2-452F-95DA-ADA3A55544E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","matchCriteriaId":"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","matchCriteriaId":"80F0FA5D-8D3B-4C0E-81E2-87998286AF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","matchCriteriaId":"36D96259-24BD-44E2-96D9-78CE1D41F956"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*","matchCriteriaId":"40513095-7E6E-46B3-B604-C926F1BA3568"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","matchCriteriaId":"B620311B-34A3-48A6-82DF-6F078D7A4493"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00009.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00011.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/commit/6328a070ddaab16faaf008cb9a8a62439c30f2a8","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/issues/536","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKNKSGBVYGRRVRLFEFBEKUEJYJR5LWOF/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FF6HYIBREQGATRM5COF57MRQWKOKCWZ3/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SRVVNXCNTNMPCIAZIVR4FAGYCSU53FNA/","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/commit/6328a070ddaab16faaf008cb9a8a62439c30f2a8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/commit/cd9368c6a1b4ef91d77bb3fdbe2e5bc34aa6f4c4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/adrienverge/openfortivpn/issues/536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKNKSGBVYGRRVRLFEFBEKUEJYJR5LWOF/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FF6HYIBREQGATRM5COF57MRQWKOKCWZ3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SRVVNXCNTNMPCIAZIVR4FAGYCSU53FNA/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2020-9432","sourceIdentifier":"cve@mitre.org","published":"2020-02-27T23:15:13.140","lastModified":"2026-06-17T03:27:56.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_x509_check_host in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values."},{"lang":"es","value":"openssl_x509_check_host en lua-openssl versión 0.7.7-1, maneja inapropiadamente la comprobación del certificado X.509 porque usa lua_pushboolean para determinados valores de retorno no booleanos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lua-openssl_project:lua-openssl:0.7.7-1:*:*:*:*:*:*:*","matchCriteriaId":"A8172202-5313-4B8D-8986-95A22F070785"}]}]}],"references":[{"url":"https://github.com/zhaozg/lua-openssl/commit/a6dc186dd4b6b9e329a93cca3e7e3cfccfdf3cca","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/zhaozg/lua-openssl/commit/a6dc186dd4b6b9e329a93cca3e7e3cfccfdf3cca","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-9433","sourceIdentifier":"cve@mitre.org","published":"2020-02-27T23:15:13.187","lastModified":"2026-06-17T03:27:56.630","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_x509_check_email in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values."},{"lang":"es","value":"openssl_x509_check_email en lua-openssl versión 0.7.7-1, maneja inapropiadamente la comprobación del certificado X.509 porque usa lua_pushboolean para determinados valores de retorno no booleanos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lua-openssl_project:lua-openssl:0.7.7-1:*:*:*:*:*:*:*","matchCriteriaId":"A8172202-5313-4B8D-8986-95A22F070785"}]}]}],"references":[{"url":"https://github.com/zhaozg/lua-openssl/commit/a6dc186dd4b6b9e329a93cca3e7e3cfccfdf3cca","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/zhaozg/lua-openssl/commit/a6dc186dd4b6b9e329a93cca3e7e3cfccfdf3cca","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-9434","sourceIdentifier":"cve@mitre.org","published":"2020-02-27T23:15:13.233","lastModified":"2026-06-17T03:27:56.730","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_x509_check_ip_asc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values."},{"lang":"es","value":"openssl_x509_check_ip_asc en lua-openssl versión 0.7.7-1, maneja inapropiadamente la comprobación del certificado X.509 porque usa lua_pushboolean para determinados valores de retorno no booleanos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lua-openssl_project:lua-openssl:0.7.7-1:*:*:*:*:*:*:*","matchCriteriaId":"A8172202-5313-4B8D-8986-95A22F070785"}]}]}],"references":[{"url":"https://github.com/zhaozg/lua-openssl/commit/a6dc186dd4b6b9e329a93cca3e7e3cfccfdf3cca","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/zhaozg/lua-openssl/commit/a6dc186dd4b6b9e329a93cca3e7e3cfccfdf3cca","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-14887","sourceIdentifier":"secalert@redhat.com","published":"2020-03-16T15:15:12.130","lastModified":"2026-06-17T02:19:14.827","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version of TLS, potentially breaking the encryption. This could lead to a leak of the data being passed over the network. Wildfly version 7.2.0.GA, 7.2.3.GA and 7.2.5.CR2 are believed to be vulnerable."},{"lang":"es","value":"Se detectó un fallo cuando un proveedor de seguridad OpenSSL es usado con Wildfly, el valor de \"enabled-protocols\" en la configuración de Wildfly no es respetado. Un atacante podría apuntar al tráfico enviado desde Wildfly y degradar la conexión a una versión más débil de TLS, rompiendo potencialmente el cifrado. Esto podría conllevar a un filtrado de los datos que son pasados a través de la red. Se cree que Wildfly versiones 7.2.0.GA, 7.2.3.GA y 7.2.5.CR2 son vulnerables."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"Red Hat","product":"wildfly","versions":[{"version":"7.2.0.GA, 7.2.3.GA, 7.2.5.CR2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV30":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-757"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_data_grid:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CD354E32-A8B0-484C-B4C6-9FBCD3430D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"72A54BDA-311C-413B-8E4D-388AD65A170A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B40CCE4F-EA2C-453D-BB76-6388767E5C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:*:*:*:*","matchCriteriaId":"A33441B3-B301-426C-A976-08CE5FE72EFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*","matchCriteriaId":"9EFEC7CA-8DDA-48A6-A7B6-1F1D14792890"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:wildfly:7.2.0:general_availability:*:*:*:*:*:*","matchCriteriaId":"3183A7CF-6426-4B9F-AC91-9CFD6F31CD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:wildfly:7.2.3:general_availability:*:*:*:*:*:*","matchCriteriaId":"FA943E12-A502-40E7-833D-79C504667EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:wildfly:7.2.5:cr2:*:*:*:*:*:*","matchCriteriaId":"DFBEF324-BC86-4DA8-9152-6E339C8751F4"}]}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14887","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-17965","source":"secalert@redhat.com","tags":["Permissions Required"]},{"url":"https://security.netapp.com/advisory/ntap-20200327-0007/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-17965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://security.netapp.com/advisory/ntap-20200327-0007/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2019-17185","sourceIdentifier":"cve@mitre.org","published":"2020-03-21T01:15:12.243","lastModified":"2026-06-17T02:23:25.993","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a Denial-of-Service (DoS) attack."},{"lang":"es","value":"En FreeRADIUS versiones 3.0.x anteriores a 3.0.20, el módulo EAP-pwd utilizó una instancia OpenSSL BN_CTX global para manejar todos los protocolos de enlace. Esto significa que varios subprocesos utilizan la misma instancia de BN_CTX simultáneamente, resultando en bloqueos cuando los protocolos de enlace EAP-pwd son iniciados. Esto puede ser abusado por un adversario como un ataque de Denegación de Servicio (DoS)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-662"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.20","matchCriteriaId":"02C9C42A-8038-4469-9745-5A19023A96ED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","matchCriteriaId":"B620311B-34A3-48A6-82DF-6F078D7A4493"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://freeradius.org/security/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://freeradius.org/security/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-7224","sourceIdentifier":"cve@mitre.org","published":"2020-04-16T19:15:34.620","lastModified":"2026-06-17T03:24:32.567","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load."},{"lang":"es","value":"El cliente Aviatrix OpenVPN versiones hasta 2.5.7 en Linux, macOS y Windows, es vulnerable cuando los parámetros OpenSSL son alterados a partir de un conjunto de valores emitidos; los parámetros podrían permitir que se carguen bibliotecas de terceros no autorizadas."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aviatrix:openvpn:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.7","matchCriteriaId":"AC55A58F-8864-44B8-8FF7-654A6C250021"}]}]}],"references":[{"url":"https://docs.aviatrix.com/#security-bulletin","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.aviatrix.com/HowTos/security_bulletin_article.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.aviatrix.com/HowTos/security_bulletin_article.html#article-avxsb-00001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.aviatrix.com/#security-bulletin","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.aviatrix.com/HowTos/security_bulletin_article.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.aviatrix.com/HowTos/security_bulletin_article.html#article-avxsb-00001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-11876","sourceIdentifier":"cve@mitre.org","published":"2020-04-17T16:15:13.977","lastModified":"2026-06-17T02:50:57.713","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242 for initialization of an OpenSSL EVP AES-256 CBC context. NOTE: the vendor states that this initialization only occurs within unreachable code"},{"lang":"es","value":"** EN DISPUTA ** El archivo airhost.exe en Zoom Client for Meetings versión 4.6.11, usa el hash SHA-256 de 0123425234234fsdfsdr3242 para la inicialización de un contexto EVP AES-256 CBC de OpenSSL. NOTA: el vendedor afirma que esta inicialización sólo se produce dentro de un código inalcanzable."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"zoom","product":"meetings","defaultStatus":"unknown","cpes":["cpe:2.3:a:zoom:meetings:4.6.11:*:*:*:*:macos:*:*"],"versions":[{"version":"4.6.11","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-01T14:51:58.132706Z","id":"CVE-2020-11876","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zoom:meetings:4.6.11:*:*:*:*:windows:*:*","matchCriteriaId":"69FEF670-B354-434F-80FA-FE2075951626"}]}]}],"references":[{"url":"https://dev.io/posts/zoomzoo/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://dev.io/posts/zoomzoo/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-1967","sourceIdentifier":"openssl-security@openssl.org","published":"2020-04-21T14:15:11.287","lastModified":"2026-10-08T21:17:24.923","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the \"signature_algorithms_cert\" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f)."},{"lang":"es","value":"Las aplicaciones de Servidor o Cliente que llaman a la función SSL_check_chain() durante o después del protocolo de enlace de TLS versión 1.3,  puede bloquear debido a una desreferencia del puntero NULL como resultado de un manejo incorrecto de la extensión TLS \"signature_algorithms_cert\". El bloqueo ocurre si se recibe un algoritmo de firma no comprobada o ni reconocido del peer. Esto podría ser explotado por un peer malicioso en un ataque de Denegación de Servicio. OpenSSL versiones 1.1.1d, 1.1.1e y 1.1.1f están afectadas por este problema. Este problema no afectaba a OpenSSL versiones anteriores a la versión  1.1.1d. Corregido en OpenSSL versión 1.1.1g (Afectado en la versión 1.1.1d-1.1.1f)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-08T20:59:20.694200Z","id":"CVE-2020-1967","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1d","versionEndIncluding":"1.1.1f","matchCriteriaId":"90907017-473C-48CA-9441-DAFAF5F81049"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*","matchCriteriaId":"BD730B6A-F123-4685-ACB3-4F20AAAB77F3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","matchCriteriaId":"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","matchCriteriaId":"80F0FA5D-8D3B-4C0E-81E2-87998286AF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","matchCriteriaId":"36D96259-24BD-44E2-96D9-78CE1D41F956"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:12.1.3:*:*:*:*:*:*:*","matchCriteriaId":"CDD7E6AC-A613-4938-91D1-402DA2038875"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D26F3E23-F1A9-45E7-9E5F-0C0A24EE3783"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F87918FE-62C0-4DC5-8894-847DFB5B7E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"61516569-C48F-4362-B334-8CA10EDB0EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:*","matchCriteriaId":"37209C6F-EF99-4D21-9608-B3A06D283D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"AD04BEE5-E9A8-4584-A68C-0195CE9C402C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*","matchCriteriaId":"0B1CAD50-749F-4ADB-A046-BF3585677A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.48","matchCriteriaId":"C6C5EC81-F74A-4280-A041-EC5EE36D0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.30","matchCriteriaId":"E1A68EF8-15AA-42A7-9734-6F9470EB35CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.20","matchCriteriaId":"0E1A3769-E443-4511-B349-B5304F5E6EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.20","matchCriteriaId":"7F198EB3-A3AB-42EA-BF3A-D8BB4D9210EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.12","matchCriteriaId":"9A3BBE71-CA00-4F54-9210-FC7572C87CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.20","matchCriteriaId":"73573516-EDA0-4176-A3ED-2F7006C87F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.21","matchCriteriaId":"9E07B577-50FE-43B4-8AAD-4C267A494A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*","matchCriteriaId":"D0A735B4-4F3C-416B-8C08-9CB21BAD2889"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","matchCriteriaId":"7E1E416B-920B-49A0-9523-382898C2979D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*","matchCriteriaId":"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*","matchCriteriaId":"C8AF00C6-B97F-414D-A8DF-057E6BFD8597"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*","versionStartIncluding":"7.3","matchCriteriaId":"BD075607-09B7-493E-8611-66D041FFDA62"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*","versionStartIncluding":"9.5","matchCriteriaId":"0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*","matchCriteriaId":"24B8DB06-590A-4008-B0AB-FCD1401C77C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*","matchCriteriaId":"F1BE6C1F-2565-4E97-92AA-16563E5660A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*","matchCriteriaId":"5735E553-9731-4AAC-BCFF-989377F817B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"4BB0FDCF-3750-44C6-AC5C-0CC2AAD14093"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","matchCriteriaId":"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*","matchCriteriaId":"E94F7F59-1785-493F-91A7-5F5EA5E87E4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:broadcom:fabric_operating_system:-:*:*:*:*:*:*:*","matchCriteriaId":"046FB51E-B768-44D3-AEB5-D857145CA840"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","matchCriteriaId":"B620311B-34A3-48A6-82DF-6F078D7A4493"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*","matchCriteriaId":"B009C22E-30A4-4288-BCF6-C3E81DEAF45A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jdedwards:enterpriseone:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.5.0","matchCriteriaId":"0E4475E9-FF6F-4B94-8989-D8E2EB69F782"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.9","matchCriteriaId":"4ACF85D6-6B45-43DA-9C01-F0208186F014"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2020/May/5","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2020/04/22/2","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1","source":"openssl-security@openssl.org"},{"url":"https://github.com/irsl/CVE-2020-1967","source":"openssl-security@openssl.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E","source":"openssl-security@openssl.org"},{"url":"https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E","source":"openssl-security@openssl.org"},{"url":"https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/","source":"openssl-security@openssl.org"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202004-10","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200424-0003/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200717-0004/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4661","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20200421.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.synology.com/security/advisory/Synology_SA_20_05","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2020-03","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2020-04","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2020-11","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-10","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2020/May/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2020/04/22/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/irsl/CVE-2020-1967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202004-10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200424-0003/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200717-0004/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20200421.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.synology.com/security/advisory/Synology_SA_20_05","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2020-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2020-04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2020-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-13417","sourceIdentifier":"cve@mitre.org","published":"2020-05-22T21:15:12.973","lastModified":"2026-06-17T02:53:06.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters."},{"lang":"es","value":"Se detectó un problema de Elevación de Privilegios en Aviatrix VPN Client versiones anteriores a 2.10.7, debido a una corrección incompleta para CVE-2020-7224. Esto afecta las instalaciones de Linux, macOS y Windows para determinados parámetros OpenSSL."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aviatrix:controller:*:*:*:*:*:*:*:*","versionEndExcluding":"5.3","matchCriteriaId":"9CEA5A84-FF70-4D24-B503-F64A3B7CFF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:aviatrix:gateway:*:*:*:*:*:*:*:*","versionEndExcluding":"5.3","matchCriteriaId":"5666CE84-692E-43AC-B53F-EA2848F7DF2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:aviatrix:vpn_client:*:*:*:*:*:*:*:*","versionEndExcluding":"2.10.7","matchCriteriaId":"9F295DE8-DBB3-4681-B712-BF662065D8C4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*","matchCriteriaId":"387021A0-AF36-463C-A605-32EA7DAC172E"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://docs.aviatrix.com/HowTos/security_bulletin_article.html#openvpn-client-elevation-of-privilege","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://docs.aviatrix.com/HowTos/security_bulletin_article.html#openvpn-client-elevation-of-privilege","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-13962","sourceIdentifier":"cve@mitre.org","published":"2020-06-09T00:15:10.123","lastModified":"2026-06-17T02:54:01.100","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mumble 1.3.0 and other products, mishandles OpenSSL's error queue, which can cause a denial of service to QSslSocket users. Because errors leak in unrelated TLS sessions, an unrelated session may be disconnected when any handshake fails. (Mumble 1.3.1 is not affected, regardless of the Qt version.)"},{"lang":"es","value":"Qt versiones 5.12.2 hasta 5.14.2, como es usado en compilaciones no oficiales de Mumble versión 1.3.0 y otros productos, maneja inapropiadamente la cola de errores de OpenSSL, lo que puede ser capaz de causar una denegación de servicio a usuarios de QSslSocket. Debido a que los errores se filtran en sesiones TLS no relacionadas, una sesión no relacionada puede ser desconectada cuando se comete un fallo en cualquier protocolo de enlace. (Mumble versión 1.3.1 no está afectado, independientemente de la versión Qt)"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mumble:mumble:1.3.0:-:*:*:*:*:*:*","matchCriteriaId":"24EBDE3F-51DC-4E90-B214-5370E19D7653"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*","versionStartIncluding":"5.12.2","versionEndExcluding":"5.12.9","matchCriteriaId":"AF9AB8E0-BB7E-4EC8-991F-2A2D826B0032"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13.0","versionEndIncluding":"5.13.2","matchCriteriaId":"7FE43F06-DFE8-466D-A9BC-FEA2B1BC069B"},{"vulnerable":true,"criteria":"cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*","versionStartIncluding":"5.14.0","versionEndIncluding":"5.14.2","matchCriteriaId":"044BF1F4-4129-47C8-BEF5-DD15555D9A98"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","matchCriteriaId":"80F0FA5D-8D3B-4C0E-81E2-87998286AF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","matchCriteriaId":"36D96259-24BD-44E2-96D9-78CE1D41F956"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*","matchCriteriaId":"E460AA51-FCDA-46B9-AE97-E6676AA5E194"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*","matchCriteriaId":"B009C22E-30A4-4288-BCF6-C3E81DEAF45A"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00004.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://bugreports.qt.io/browse/QTBUG-83450","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://github.com/mumble-voip/mumble/issues/3679","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/mumble-voip/mumble/pull/4032","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X6EDPIIAQPVP2CHL2CHDHJ25EECA7UE/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQJDBZUYMMF4R5QQKD2HTIKQU2NSKO63/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3IZY7LKJ6NAXQDFYFR4S7L5BBHYK53K/","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/202007-18","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://bugreports.qt.io/browse/QTBUG-83450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://github.com/mumble-voip/mumble/issues/3679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://github.com/mumble-voip/mumble/pull/4032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X6EDPIIAQPVP2CHL2CHDHJ25EECA7UE/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQJDBZUYMMF4R5QQKD2HTIKQU2NSKO63/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3IZY7LKJ6NAXQDFYFR4S7L5BBHYK53K/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202007-18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-8224","sourceIdentifier":"support@hackerone.com","published":"2020-08-10T14:15:13.267","lastModified":"2026-06-17T03:26:05.193","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory."},{"lang":"es","value":"Una inyección de código en Nextcloud Desktop Client versión 2.6.4, permitió cargar código arbitrario cuando se coloca una configuración de OpenSSL maliciosa en un directorio fijo"}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"n/a","product":"Desktop Client","versions":[{"version":"Fixed in 2.6.5","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"support@hackerone.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nextcloud:desktop:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.5","matchCriteriaId":"032BCD9E-159A-4BB1-BCE6-0E405BA6F6C4"}]}]}],"references":[{"url":"https://hackerone.com/reports/622170","source":"support@hackerone.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://nextcloud.com/security/advisory/?id=NC-SA-2020-030","source":"support@hackerone.com","tags":["Broken Link","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/202009-09","source":"support@hackerone.com","tags":["Third Party Advisory"]},{"url":"https://hackerone.com/reports/622170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://nextcloud.com/security/advisory/?id=NC-SA-2020-030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/202009-09","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-24714","sourceIdentifier":"cve@mitre.org","published":"2020-08-27T22:15:09.957","lastModified":"2026-06-17T03:06:01.430","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option."},{"lang":"es","value":"El Scalyr Agent versiones anteriores a 2.1.10, presenta una Falta de Comprobación de Certificado SSL porque, en algunas circunstancias, el binario openssl es llamado sin la opción verify_hostname"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scalyr:scalyr_agent:*:*:*:*:*:*:*:*","versionEndExcluding":"2.1.10","matchCriteriaId":"41D9238C-E07D-4EA6-9F55-43FA7EDF98EF"}]}]}],"references":[{"url":"https://scalyr-static.s3.amazonaws.com/technical-details/index.html","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://scalyr-static.s3.amazonaws.com/technical-details/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-1968","sourceIdentifier":"openssl-security@openssl.org","published":"2020-09-09T14:15:12.507","lastModified":"2026-06-17T03:02:44.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v)."},{"lang":"es","value":"El ataque Raccoon explota un fallo en la especificación TLS que puede conllevar a que un atacante sea capaz de calcular el secreto pre-master en conexiones que han usado un conjunto de cifrado basado en Diffie-Hellman (DH).&#xa0;En tal caso, esto haría que el atacante pudiera espiar todas las comunicaciones cifradas enviadas por medio de esa conexión TLS.&#xa0;El ataque solo puede ser explotado si una implementación reutiliza un secreto de DH en varias conexiones TLS.&#xa0;Tome en cuenta que este problema solo afecta a los conjuntos de cifrado DH y no a los conjuntos de cifrado ECDH.&#xa0;Este problema afecta a OpenSSL versión 1.0.2, que no es compatible y ya no recibe actualizaciones públicas.&#xa0;OpenSSL versión 1.1.1 no es vulnerable a este problema.&#xa0;Corregido en OpenSSL versión 1.0.2w (Afectadas versiones 1.0.2-1.0.2v)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-16T14:10:30.475111Z","id":"CVE-2020-1968","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndIncluding":"1.0.2v","matchCriteriaId":"A05055C5-49F7-4B9F-B2DC-D192296C41F0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*","matchCriteriaId":"0B1CAD50-749F-4ADB-A046-BF3585677A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*","matchCriteriaId":"D0A735B4-4F3C-416B-8C08-9CB21BAD2889"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","matchCriteriaId":"7E1E416B-920B-49A0-9523-382898C2979D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*","matchCriteriaId":"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:ethernet_switch_es2-64_firmware:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8B0403A9-E552-48CA-9CD5-31B48684FF70"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:ethernet_switch_es2-64:-:*:*:*:*:*:*:*","matchCriteriaId":"D4AB93AB-A30F-40AE-8246-10036FF077FE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:ethernet_switch_es2-72_firmware:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4F58DF8F-5478-4E00-BF9D-14BA3B79DA99"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:ethernet_switch_es2-72:-:*:*:*:*:*:*:*","matchCriteriaId":"0D4E5146-C8E3-40D2-93D9-F9E85768A5B4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2400","matchCriteriaId":"9C3CF24D-2DE4-4E3B-B36E-D952D0E65E0B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*","matchCriteriaId":"983D27DE-BC89-454E-AE47-95A26A3651E2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2400","matchCriteriaId":"9F742415-8605-4B83-9410-BDA07BABF740"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*","matchCriteriaId":"5825AEE1-B668-40BD-86A9-2799430C742C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2400","matchCriteriaId":"4E9ED009-8D47-430C-9F59-EE09ECF2299E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*","matchCriteriaId":"3DA2D526-BDCF-4A65-914A-B3BA3A0CD613"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2400","matchCriteriaId":"9AB0DC35-F821-49BA-A5F1-45DD086915B0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*","matchCriteriaId":"EE0CF40B-E5BD-4558-9321-184D58EF621D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2400","matchCriteriaId":"6DF75FC1-C88D-45DA-BBD0-7EB0B9EED343"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*","matchCriteriaId":"0F3C9C09-7B2B-4DB6-8BE0-35302ED35776"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2400","matchCriteriaId":"9762A1D1-ED90-4E9C-B672-2499ABA48C46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*","matchCriteriaId":"95503CE5-1D06-4092-A60D-D310AADCAFB1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3100","matchCriteriaId":"4D2AB72D-52FB-4D23-95FD-D10958F8B936"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*","matchCriteriaId":"983D27DE-BC89-454E-AE47-95A26A3651E2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3100","matchCriteriaId":"B1198FC6-A33A-4F4D-9643-51DEE8D46E17"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*","matchCriteriaId":"5825AEE1-B668-40BD-86A9-2799430C742C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3100","matchCriteriaId":"12F2A182-B9A0-4011-9791-435C5709E313"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*","matchCriteriaId":"3DA2D526-BDCF-4A65-914A-B3BA3A0CD613"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3100","matchCriteriaId":"B037D0E6-B857-4539-ADDC-FE2ADC2B0C2F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*","matchCriteriaId":"EE0CF40B-E5BD-4558-9321-184D58EF621D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3100","matchCriteriaId":"968A6DC3-9E0B-4FBD-8AAB-2ECD8CE47D23"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*","matchCriteriaId":"0F3C9C09-7B2B-4DB6-8BE0-35302ED35776"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3100","matchCriteriaId":"C219921D-966D-4EAC-A129-9D4BFE6FCD36"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*","matchCriteriaId":"95503CE5-1D06-4092-A60D-D310AADCAFB1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:ethernet_switch_es1-24_firmware:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"EDA6CD79-6D03-44C6-BA41-F190E5037EF3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:ethernet_switch_es1-24:-:*:*:*:*:*:*:*","matchCriteriaId":"62136C7B-992F-4889-9394-B233533636E3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:ethernet_switch_tor-72_firmware:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FCDF5167-832D-4483-AD01-6534111196FB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:oracle:ethernet_switch_tor-72:-:*:*:*:*:*:*:*","matchCriteriaId":"03657F1F-618B-479D-AD29-BB58AF1A3819"}]}]}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00016.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202210-02","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200911-0004/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4504-1/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20200909.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202210-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200911-0004/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4504-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20200909.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-7069","sourceIdentifier":"security@php.net","published":"2020-10-02T15:15:12.670","lastModified":"2026-06-17T03:24:18.363","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data."},{"lang":"es","value":"En PHP versiones 7.2.x por debajo de 7.2.34, versiones 7.3.x por debajo de 7.3.23 y versiones 7.4.x por debajo de 7.4.11, cuando el modo AES-CCM es usado con la función openssl_encrypt() con 12 bytes IV, solo los primeros 7 bytes del IV está actualmente usado.&#xa0;Esto puede conllevar a una disminución de seguridad y datos de cifrado incorrectos"}],"affected":[{"source":"security@php.net","affectedData":[{"vendor":"PHP Group","product":"PHP","versions":[{"version":"7.3.x","lessThan":"7.3.23","versionType":"custom","status":"affected"},{"version":"7.4.x","lessThan":"7.4.11","versionType":"custom","status":"affected"},{"version":"7.2.x","lessThan":"7.2.34","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@php.net","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"security@php.net","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"7.2.34","matchCriteriaId":"63EC1EEB-0BEC-496B-B225-066232FDFCF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.3.23","matchCriteriaId":"EEFF4B6D-4A40-479B-846E-EA3372E062E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.11","matchCriteriaId":"7D5112FC-B50B-4C73-A876-0C7FB66EB4F1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","matchCriteriaId":"80F0FA5D-8D3B-4C0E-81E2-87998286AF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","matchCriteriaId":"36D96259-24BD-44E2-96D9-78CE1D41F956"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*","matchCriteriaId":"E460AA51-FCDA-46B9-AE97-E6676AA5E194"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","matchCriteriaId":"B620311B-34A3-48A6-82DF-6F078D7A4493"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*","matchCriteriaId":"B009C22E-30A4-4288-BCF6-C3E81DEAF45A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*","matchCriteriaId":"902B8056-9E37-443B-8905-8AA93E2447FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*","matchCriteriaId":"1FE996B1-6951-4F85-AA58-B99A379D2163"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.5.0","matchCriteriaId":"C88D46AF-459D-4917-9403-0F63FEC83512"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*","versionEndExcluding":"5.19.0","matchCriteriaId":"41DBA7C7-8084-45F6-B59D-13A9022C34DF"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00045.html","source":"security@php.net","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00067.html","source":"security@php.net","tags":["Mailing List","Third Party Advisory"]},{"url":"https://bugs.php.net/bug.php?id=79601","source":"security@php.net","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EVDN7D3IB4EAI4D3ZOM2OJKQ5SD7K4E/","source":"security@php.net"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2J3ZZDHCSX65T5QWV4AHBN7MOJXBEKG/","source":"security@php.net"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RRU57N3OSYZPOMFWPRDNVH7EMYOTSZ66/","source":"security@php.net"},{"url":"https://security.gentoo.org/glsa/202012-16","source":"security@php.net","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20201016-0001/","source":"security@php.net","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4583-1/","source":"security@php.net","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4856","source":"security@php.net","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"security@php.net","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"security@php.net","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-14","source":"security@php.net","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://bugs.php.net/bug.php?id=79601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EVDN7D3IB4EAI4D3ZOM2OJKQ5SD7K4E/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2J3ZZDHCSX65T5QWV4AHBN7MOJXBEKG/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RRU57N3OSYZPOMFWPRDNVH7EMYOTSZ66/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202012-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20201016-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4583-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-25644","sourceIdentifier":"secalert@redhat.com","published":"2020-10-06T14:15:12.760","lastModified":"2026-06-17T03:07:02.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability."},{"lang":"es","value":"Se encontró un fallo de pérdida de memoria en WildFly OpenSSL en versiones anteriores a 1.1.3.Final, donde se elimina una sesión HTTP.&#xa0;Puede permitir a un atacante causar OOM conllevando a una denegación de servicio.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"wildfly-openssl","versions":[{"version":"before wildfly-openssl 1.1.3.Final","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-401"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:wildfly_openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.3","matchCriteriaId":"290F30D1-B0BF-42C3-B5EC-09746D88C2C6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:data_grid:8.0:*:*:*:*:*:*:*","matchCriteriaId":"7095200A-4DAC-4433-99E8-86CA88E1E4D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_data_grid:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CD354E32-A8B0-484C-B4C6-9FBCD3430D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"72A54BDA-311C-413B-8E4D-388AD65A170A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B40CCE4F-EA2C-453D-BB76-6388767E5C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:*:*:*:*","matchCriteriaId":"A33441B3-B301-426C-A976-08CE5FE72EFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*","matchCriteriaId":"9EFEC7CA-8DDA-48A6-A7B6-1F1D14792890"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*","matchCriteriaId":"F1BE6C1F-2565-4E97-92AA-16563E5660A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*","matchCriteriaId":"5735E553-9731-4AAC-BCFF-989377F817B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:service_level_manager:-:*:*:*:*:*:*:*","matchCriteriaId":"7081652A-D28B-494E-94EF-CA88117F23EE"}]}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1885485","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://github.com/wildfly-security/wildfly-openssl-natives/pull/4/files","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://issues.redhat.com/browse/WFSSL-51","source":"secalert@redhat.com","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20201016-0004/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1885485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://github.com/wildfly-security/wildfly-openssl-natives/pull/4/files","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://issues.redhat.com/browse/WFSSL-51","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20201016-0004/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-10138","sourceIdentifier":"cret@cert.org","published":"2020-10-21T14:15:15.013","lastModified":"2026-06-17T02:47:25.737","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\\jenkins_agent\\. Acronis Cyber Backup and Cyber Protect contain a privileged service that uses this OpenSSL component. Because unprivileged Windows users can create subdirectories off of the system root, a user can create the appropriate path to a specially-crafted openssl.cnf file to achieve arbitrary code execution with SYSTEM privileges."},{"lang":"es","value":"Acronis Cyber ??Backup versión 12.5 y Cyber ??Protect versión 15 incluyen un componente OpenSSL que especifica una variable OPENSSLDIR como un subdirectorio dentro de C:\\jenkins_agent\\.&#xa0;Acronis Cyber ??Backup y Cyber ??Protect contienen un servicio privilegiado que usa este componente de OpenSSL.&#xa0;Debido a que los usuarios de Windows no privilegiados pueden crear subdirectorios fuera del root del sistema, un usuario puede crear la ruta apropiada a un archivo openssl.cnf especialmente diseñado para lograr una ejecución de código arbitraria con privilegios del SYSTEM"}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"Acronis","product":"Cyber Backup","versions":[{"version":"12.5","lessThan":"16363","versionType":"custom","status":"affected"}]},{"vendor":"Acronis","product":"Cyber Protect","versions":[{"version":"15","lessThan":"24600","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cret@cert.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cret@cert.org","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-665"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acronis:cyber_backup:*:*:*:*:*:*:*:*","versionEndExcluding":"12.5","matchCriteriaId":"D50B1D5A-751B-43C6-A5DE-681B242A1874"},{"vulnerable":true,"criteria":"cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*","versionEndExcluding":"15","matchCriteriaId":"547972AF-7F43-4A6D-AFC7-5514DD9995A6"}]}]}],"references":[{"url":"https://www.kb.cert.org/vuls/id/114757","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/114757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2020-10139","sourceIdentifier":"cret@cert.org","published":"2020-10-21T14:15:15.187","lastModified":"2026-06-17T02:47:25.853","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Acronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\\jenkins_agent\\. Acronis True Image contains a privileged service that uses this OpenSSL component. Because unprivileged Windows users can create subdirectories off of the system root, a user can create the appropriate path to a specially-crafted openssl.cnf file to achieve arbitrary code execution with SYSTEM privileges."},{"lang":"es","value":"Acronis True Image 2021 incluye un componente OpenSSL que especifica una variable OPENSSLDIR como un subdirectorio dentro de C:\\jenkins_agent\\.&#xa0;Acronis True Image contiene un servicio privilegiado que usa este componente de OpenSSL.&#xa0;Debido a que los usuarios de Windows no privilegiados pueden crear subdirectorios fuera del root del sistema, un usuario puede crear la ruta apropiada a un archivo openssl.cnf especialmente diseñado para lograr una ejecución de código arbitraria con privilegios SYSTEM"}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"Acronis","product":"True Image 2021","versions":[{"version":"unspecified","lessThan":"32010","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cret@cert.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cret@cert.org","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-665"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acronis:true_image:2021:*:*:*:*:*:*:*","matchCriteriaId":"CBD8DD1F-FE8D-4733-AB2D-CD89361F8210"}]}]}],"references":[{"url":"https://www.kb.cert.org/vuls/id/114757","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/114757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2020-25646","sourceIdentifier":"secalert@redhat.com","published":"2020-10-29T20:15:19.087","lastModified":"2026-06-17T03:07:02.543","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in Ansible Collection community.crypto. openssl_privatekey_info exposes private key in logs. This directly impacts confidentiality"},{"lang":"es","value":"Se encontró uno fallo en Ansible Collection community.crypto.&#xa0;La función openssl_privatekey_info expone la clave privada en los registros.&#xa0;Esto impacta directamente la confidencialidad"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"Ansible Community","product":"Community Collections","versions":[{"version":"from 1.0.0 to 1.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-117"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-116"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ansible_collections_project:community.crypto:-:*:*:*:*:*:*:*","matchCriteriaId":"835E2E70-BA5D-4D5E-8DD5-CC20FA0E3289"}]}]}],"references":[{"url":"https://github.com/ansible-collections/community.crypto/commit/233d1afc296f6770e905a1785ee2f35af7605e43","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/ansible-collections/community.crypto/commit/233d1afc296f6770e905a1785ee2f35af7605e43","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-5992","sourceIdentifier":"psirt@nvidia.com","published":"2020-11-11T23:15:11.820","lastModified":"2026-06-17T03:22:34.683","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its open-source software dependency in which the OpenSSL library is vulnerable to binary planting attacks by a local user, which may lead to code execution or escalation of privileges."},{"lang":"es","value":"El software de aplicación NVIDIA GeForce NOW en Windows, todas las versiones anteriores a 2.0.25.119, contiene una vulnerabilidad en su dependencia de software de código abierto en la que la biblioteca OpenSSL es vulnerable a ataques de plantación binaria por parte de un usuario local, lo que puede conllevar a una ejecución de código o escalada de privilegios"}],"affected":[{"source":"psirt@nvidia.com","affectedData":[{"vendor":"NVIDIA","product":"NVIDIA GeForce NOW Application","versions":[{"version":"All versions prior to 2.0.25.119 (Windows)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:geforce_now:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.25.119","matchCriteriaId":"7330097D-F058-4D06-8874-208E07CF358D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5096","source":"psirt@nvidia.com","tags":["Patch","Vendor Advisory"]},{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-1971","sourceIdentifier":"openssl-security@openssl.org","published":"2020-12-08T16:15:11.730","lastModified":"2026-06-17T03:02:44.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w)."},{"lang":"es","value":"El tipo GeneralName X.509 es un tipo genérico para representar diferentes tipos de nombres.&#xa0;Uno de esos tipos de nombres se conoce como EDIPartyName.&#xa0;OpenSSL proporciona una función GENERAL_NAME_cmp que compara diferentes instancias de GENERAL_NAME para ver si son iguales o no.&#xa0;Esta función se comporta incorrectamente cuando ambos GENERAL_NAME contienen un EDIPARTYNAME.&#xa0;Es posible que se produzca una desreferencia del puntero NULL y un bloqueo que conduzca a un posible ataque de denegación de servicio.&#xa0;El propio OpenSSL usa la función GENERAL_NAME_cmp para dos propósitos:&#xa0;1) Comparación de nombres de puntos de distribución de CRL entre una CRL disponible y un punto de distribución de CRL insertado en un certificado X509 2) Al comparar que un firmante de token de respuesta de marca de tiempo coincide con el nombre de autoridad de marca de tiempo (expuesto por medio de las funciones API TS_RESP_verify_response y TS_RESP_verify_token) Si un atacante puede controlar ambos elementos que se están comparando, entonces ese atacante podría desencadenar un bloqueo.&#xa0;Por ejemplo, si el atacante puede engañar a un cliente o servidor para que compruebe un certificado malicioso con una CRL maliciosa, esto puede ocurrir.&#xa0;Tome en cuenta que algunas aplicaciones descargan automáticamente las CRL basadas en una URL insertada en un certificado.&#xa0;Esta comprobación ocurre antes de que se verifiquen las firmas en el certificado y la CRL.&#xa0;Las herramientas s_server, s_client y verify de OpenSSL tienen soporte para la opción \"-crl_download\"&#xa0;que implementa la descarga automática de CRL y se ha demostrado que este ataque funciona contra esas herramientas.&#xa0;Tome en cuenta que un error no relacionado significa que las versiones afectadas de OpenSSL no pueden analizar ni construir codificaciones correctas de EDIPARTYNAME.&#xa0;Sin embargo, es posible construir un EDIPARTYNAME malformado que el analizador de OpenSSL aceptará y, por lo tanto, desencadenará este ataque.&#xa0;Todas las versiones de OpenSSL 1.1.1 y 1.0.2 están afectadas por este problema.&#xa0;Otras versiones de OpenSSL no son compatibles y no se han comprobado.&#xa0;Corregido en OpenSSL versiones 1.1.1i (Afectado versiones 1.1.1-1.1.1h).&#xa0;Corregido en OpenSSL versiones 1.0.2x (Afectado versiones 1.0.2-1.0.2w).&#xa0;Sin embargo, es posible construir un EDIPARTYNAME malformado que el analizador de OpenSSL aceptará y, por lo tanto, desencadenará este ataque.&#xa0;Todas las versiones de OpenSSL 1.1.1 y 1.0.2 están afectadas por este problema.&#xa0;Otras versiones de OpenSSL no son compatibles y no se han comprobado.&#xa0;Corregido en OpenSSL versión 1.1.1i (Afectada versión 1.1.1-1.1.1h).&#xa0;Corregido en OpenSSL versión 1.0.2x (Afectada versión 1.0.2-1.0.2w).&#xa0;Sin embargo, es posible construir un EDIPARTYNAME malformado que el analizador de OpenSSL aceptará y, por lo tanto, desencadenará este ataque.&#xa0;Todas las versiones de OpenSSL 1.1.1 y 1.0.2 están afectadas por este problema.&#xa0;Otras versiones de OpenSSL no son compatibles y no se han comprobado.&#xa0;Corregido en OpenSSL versión 1.1.1i (Afectada versión 1.1.1-1.1.1h).&#xa0;Corregido en OpenSSL versión 1.0.2x (Afectada versión 1.0.2-1.0.2w)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-29T15:40:23.131860Z","id":"CVE-2020-1971","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2x","matchCriteriaId":"4D0947DA-4A07-4C73-9FE7-7666734C568B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1i","matchCriteriaId":"BFE3E95C-90F0-48C0-A737-28AD6AC2BDB8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*","matchCriteriaId":"36D96259-24BD-44E2-96D9-78CE1D41F956"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*","matchCriteriaId":"E460AA51-FCDA-46B9-AE97-E6676AA5E194"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5553591-073B-45E3-999F-21B8BA2EEE22"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"D40AD626-B23A-44A3-A6C0-1FFB4D647AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"B602F9E8-1580-436C-A26D-6E6F8121A583"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"77C3DD16-1D81-40E1-B312-50FBD275507C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"81DAC8C0-D342-44B5-9432-6B88D389584F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"C2A5B24D-BDF2-423C-98EA-A40778C01A05"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.1.0","matchCriteriaId":"B5B4A191-44AE-4C35-9164-19237D2CF013"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndIncluding":"8.2.3","matchCriteriaId":"A543B4F8-149A-48AB-B388-AB7FA2ECAC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_border_controller:cz8.2:*:*:*:*:*:*:*","matchCriteriaId":"45F90ABB-2633-447C-B510-D63D9898BD67"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_border_controller:cz8.3:*:*:*:*:*:*:*","matchCriteriaId":"22822A0F-A2C4-427A-931F-428D2C010ECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_border_controller:cz8.4:*:*:*:*:*:*:*","matchCriteriaId":"62A561CF-09BE-4EDB-AAB7-4B057C0B0E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_router:cz8.2:*:*:*:*:*:*:*","matchCriteriaId":"58E8C3A9-1B8B-4D13-B0E9-DC620F619DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_router:cz8.3:*:*:*:*:*:*:*","matchCriteriaId":"5C880943-5A11-483E-9DA8-88D1D487BAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_router:cz8.4:*:*:*:*:*:*:*","matchCriteriaId":"ECF63433-30CC-4E0D-B66A-FD160111763B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:cz8.2:*:*:*:*:*:*:*","matchCriteriaId":"662B8154-6FFA-4B63-B5AD-18B1CECB3AF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:cz8.3:*:*:*:*:*:*:*","matchCriteriaId":"5F2BFCE3-D743-4AC6-8FEC-75CAF66BFB65"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:cz8.4:*:*:*:*:*:*:*","matchCriteriaId":"B8D05530-BFC7-4652-B387-BC931F43AB5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_unified_session_manager:scz8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"A200B074-61AF-4E1D-8F96-A73BECF81BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_communications_broker:pcz3.1:*:*:*:*:*:*:*","matchCriteriaId":"83739D8B-EAA0-43CD-B0EB-278C2F65CA42"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_communications_broker:pcz3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3AD28E-4372-4B22-A0B9-B9BA7760E381"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_communications_broker:pcz3.3:*:*:*:*:*:*:*","matchCriteriaId":"4B317147-064A-4786-B3D6-CDE1653E067E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7582B307-3899-4BBB-B868-BC912A4D0109"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D26F3E23-F1A9-45E7-9E5F-0C0A24EE3783"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"61516569-C48F-4362-B334-8CA10EDB0EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B095CC03-7077-4A58-AB25-CC5380CDCE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_session_border_controller:cz8.2:*:*:*:*:*:*:*","matchCriteriaId":"EC124081-4465-4A80-897A-1DAC1013915E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_session_border_controller:cz8.3:*:*:*:*:*:*:*","matchCriteriaId":"B2AFC7C4-9FCC-425B-A010-F9EA0665753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_session_border_controller:cz8.4:*:*:*:*:*:*:*","matchCriteriaId":"FC109637-7BCA-4E9D-AC51-48D488E17E2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*","matchCriteriaId":"394A16F2-CCD4-44E5-BF6B-E0C782A9FA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:19.3.4:*:*:*:enterprise:*:*:*","matchCriteriaId":"937F66F5-F5BA-4156-82E0-EB2C99ABD41A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:20.3.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"BC0F8B31-F93B-40B6-9C06-A3996DC63829"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"AD04BEE5-E9A8-4584-A68C-0195CE9C402C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.5.3","matchCriteriaId":"4BCA7DD9-8599-4E43-9D82-999BE15483B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*","matchCriteriaId":"0B1CAD50-749F-4ADB-A046-BF3585677A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.22","matchCriteriaId":"16DEEDB2-E304-41A3-97DB-EDDFB16BE624"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.32","matchCriteriaId":"B4335442-548B-48AB-A399-DB146C6A8705"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.15","versionEndIncluding":"8.0.22","matchCriteriaId":"B7EAD39D-A892-4667-89D9-F66A33EAF9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*","matchCriteriaId":"D0A735B4-4F3C-416B-8C08-9CB21BAD2889"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","matchCriteriaId":"7E1E416B-920B-49A0-9523-382898C2979D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*","matchCriteriaId":"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*","matchCriteriaId":"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*","matchCriteriaId":"B55E8D50-99B4-47EC-86F9-699B67D473CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"62347994-1353-497C-9C4A-D5D8D95F67E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:data_ontap:-:*:*:*:*:7-mode:*:*","matchCriteriaId":"6C2ACC32-5147-4EA5-95BE-B6B4EAB3D82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0.0","versionEndIncluding":"11.60.3","matchCriteriaId":"BD1E9594-C46F-40D1-8BC2-6B16635B55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*","matchCriteriaId":"A3C19813-E823-456A-B1CE-EC0684CE1953"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:manageability_software_development_kit:-:*:*:*:*:*:*:*","matchCriteriaId":"D39DCAE7-494F-40B2-867F-6C6A077939DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*","matchCriteriaId":"F1BE6C1F-2565-4E97-92AA-16563E5660A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*","matchCriteriaId":"5735E553-9731-4AAC-BCFF-989377F817B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*","matchCriteriaId":"FFE0A9D2-9A49-4BF6-BC6F-8249162D8334"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"361B791A-D336-4431-8F68-8135BEFFAEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","matchCriteriaId":"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*","matchCriteriaId":"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"},{"vulnerable":true,"criteria":"cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*","matchCriteriaId":"AD7447BC-F315-4298-A822-549942FC118B"},{"vulnerable":true,"criteria":"cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*","matchCriteriaId":"02DEB4FB-A21D-4CB1-B522-EEE5093E8521"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:ef600a_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"5356D8E0-38AB-44F2-BA0A-F884C92222D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:ef600a:-:*:*:*:*:*:*:*","matchCriteriaId":"44824034-DB0C-47AC-A32F-1EA373F30A61"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_a250_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0D5DE972-F8B8-4964-943A-DA0BD18289D1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_a250:-:*:*:*:*:*:*:*","matchCriteriaId":"D4B1F59C-6ADA-4930-834F-2A8A8444F6AE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.9","matchCriteriaId":"4ACF85D6-6B45-43DA-9C01-F0208186F014"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:*:*:*:*:*:*:*:*","versionEndExcluding":"5.13.1","matchCriteriaId":"A87E730E-019C-4DCB-BA73-3994ECEF0C66"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.1.1","matchCriteriaId":"B0F46497-4AB0-49A7-9453-CC26837BF253"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"10.0.0","versionEndIncluding":"10.12.0","matchCriteriaId":"25A3180B-21AF-4010-9DAB-41ADFD2D8031"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"10.13.0","versionEndExcluding":"10.23.1","matchCriteriaId":"33081E31-5166-4064-91AA-951F5CD930D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"12.0.0","versionEndIncluding":"12.12.0","matchCriteriaId":"564ED5C8-50D7-413A-B88E-E62B6C07336A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"12.13.0","versionEndExcluding":"12.20.1","matchCriteriaId":"58879E00-2C36-4C1B-9993-2422346624D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.14.0","matchCriteriaId":"428DCD7B-6F66-4F18-B780-5BD80143D482"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"14.15.0","versionEndExcluding":"14.15.4","matchCriteriaId":"2F2D8EEB-7A9E-472A-B820-A3C33CB93B61"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"15.0.0","versionEndExcluding":"15.5.0","matchCriteriaId":"1A868E7E-C25A-4B2A-BB37-7F2584ECB2D4"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2021/09/14/2","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920","source":"openssl-security@openssl.org"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E","source":"openssl-security@openssl.org"},{"url":"https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E","source":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/","source":"openssl-security@openssl.org"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202012-13","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20201218-0005/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210513-0002/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2020/dsa-4807","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20201208.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2020-11","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-09","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-10","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/09/14/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202012-13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20201218-0005/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210513-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2020/dsa-4807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20201208.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2020-11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-09","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-10143","sourceIdentifier":"cret@cert.org","published":"2020-12-09T23:15:12.247","lastModified":"2026-06-17T02:47:26.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Macrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR variable as C:\\openssl\\. Macrium Reflect contains a privileged service that uses this OpenSSL component. Because unprivileged Windows users can create subdirectories off of the system root, a user can create the appropriate path to a specially-crafted openssl.cnf file to achieve arbitrary code execution with SYSTEM privileges."},{"lang":"es","value":"Macrium Reflect incluye un componente OpenSSL que especifica una variable OPENSSLDIR como C:\\openssl\\. Macrium Reflect contiene un servicio privilegiado que utiliza este componente OpenSSL.&#xa0;Debido a que los usuarios de Windows no privilegiados pueden crear subdirectorios fuera del sistema root, un usuario puede crear la ruta apropiada para que un archivo openssl.cnf especialmente diseñado logre una ejecución de código arbitraria con privilegios SYSTEM"}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"Macrium","product":"Reflect","versions":[{"version":"7.2","lessThan":"7.2*","versionType":"custom","status":"affected"},{"version":"7.3","lessThan":"7.3.5281","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cret@cert.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cret@cert.org","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-665"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macrium:reflect:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3.5281","matchCriteriaId":"BEFBF53F-6DF5-42E3-90B6-B0BD85336DC4"}]}]}],"references":[{"url":"https://www.kb.cert.org/vuls/id/760767","source":"cret@cert.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.kb.cert.org/vuls/id/760767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2020-36160","sourceIdentifier":"cve@mitre.org","published":"2021-01-06T01:15:12.747","lastModified":"2026-06-17T03:14:52.053","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Veritas System Recovery before 21.2. On start-up, it loads the OpenSSL library from \\usr\\local\\ssl. This library attempts to load the from \\usr\\local\\ssl\\openssl.cnf configuration file, which does not exist. By default, on Windows systems, users can create directories under C:\\. A low privileged user can create a C:\\usr\\local\\ssl\\openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data and installed applications, etc. If the system is also an Active Directory domain controller, then this can affect the entire domain."},{"lang":"es","value":"Se detectó un problema en Veritas System Recovery versiones anteriores a 21.2.&#xa0;Al iniciarse, carga la biblioteca OpenSSL desde \\usr\\local\\ssl.&#xa0;Esta biblioteca intenta cargar el archivo de configuración desde \\usr\\local\\ssl\\openssl.cnf, que no existe.&#xa0;Por defecto, en los sistemas Windows, los usuarios pueden crear directorios en C:\\.&#xa0;Un usuario poco privilegiado puede crear un archivo de configuración C:\\usr\\local\\ssl\\openssl.cnf para cargar un motor OpenSSL malicioso, resultando en una ejecución de código arbitraria como SYSTEM cuando se inicia el servicio.&#xa0;Esto le otorga al atacante acceso de administrador al sistema, permitiendo al atacante (por defecto) acceder a todos los datos y aplicaciones instaladas, etc. Si el sistema también es un controlador de dominio de Active Directory, entonces esto puede afectar a todo el dominio"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:system_recovery:*:*:*:*:*:*:*:*","versionEndExcluding":"21.2","matchCriteriaId":"45D3164A-FD51-40C7-90D8-F1FF08CAC2A2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-017","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-36161","sourceIdentifier":"cve@mitre.org","published":"2021-01-06T01:15:12.810","lastModified":"2026-06-17T03:14:52.197","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Veritas APTARE 10.4 before 10.4P9 and 10.5 before 10.5P3. By default, on Windows systems, users can create directories under C:\\. A low privileged user can create a directory at the configuration file locations. When the Windows system restarts, a malicious OpenSSL engine could exploit arbitrary code execution as SYSTEM. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc."},{"lang":"es","value":"Se detectó un problema en Veritas APTARE versiones 10.4 anteriores a 10.4P9 y versiones 10.5 anteriores a 10.5P3.&#xa0;Por defecto, en los sistemas Windows, los usuarios pueden crear directorios en C:\\.&#xa0;Un usuario poco privilegiado puede crear un directorio en las ubicaciones del archivo de configuración.&#xa0;Cuando se reinicia el sistema Windows, un motor OpenSSL malicioso podría explotar una ejecución de código arbitraria como SYSTEM.&#xa0;Esto le otorga al atacante acceso de administrador al sistema, permitiendo al atacante (por defecto) acceder a todos los datos, acceder a todas las aplicaciones instaladas, etc"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:aptare_it_analytics:10.4.00:-:*:*:*:*:*:*","matchCriteriaId":"3F214244-BD54-4579-81B3-F9B508861BFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:aptare_it_analytics:10.4.00:patch1:*:*:*:*:*:*","matchCriteriaId":"07BDFC9E-1D04-4EF2-B93A-4D25FA78FD8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:aptare_it_analytics:10.4.00:patch2:*:*:*:*:*:*","matchCriteriaId":"681F88EB-9059-4FAA-98D9-83D936CCC292"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:aptare_it_analytics:10.4.00:patch3:*:*:*:*:*:*","matchCriteriaId":"50F4195B-C03C-49F3-801F-A7B6E4E382B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:aptare_it_analytics:10.4.00:patch4:*:*:*:*:*:*","matchCriteriaId":"F02D93EE-671D-4BE7-B6D5-FD74F483893A"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:aptare_it_analytics:10.4.00:patch5:*:*:*:*:*:*","matchCriteriaId":"7D867DAF-F441-48B2-A77A-380BE0DF151B"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:aptare_it_analytics:10.4.00:patch6:*:*:*:*:*:*","matchCriteriaId":"FE3EC431-0A78-42E4-900E-D19FEA8C12FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:aptare_it_analytics:10.4.00:patch7:*:*:*:*:*:*","matchCriteriaId":"CB25E6DF-822F-40C9-BC19-BC65F2343E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:aptare_it_analytics:10.4.00:patch8:*:*:*:*:*:*","matchCriteriaId":"124313FD-7198-46F2-9AE4-97421E79E715"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:aptare_it_analytics:10.5.00:-:*:*:*:*:*:*","matchCriteriaId":"EC4CE343-9FF2-437C-9EEA-586C2F9D8472"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:aptare_it_analytics:10.5.00:patch1:*:*:*:*:*:*","matchCriteriaId":"C000D745-8C9D-43EC-9386-625CE618AA46"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-009","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-36162","sourceIdentifier":"cve@mitre.org","published":"2021-01-06T01:15:12.857","lastModified":"2026-06-17T03:14:52.327","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Veritas CloudPoint before 8.3.0.1+hotfix. The CloudPoint Windows Agent leverages OpenSSL. This OpenSSL library attempts to load the \\usr\\local\\ssl\\openssl.cnf configuration file, which does not exist. By default, on Windows systems users can create directories under <drive>:\\. A low privileged user can create a <drive>:\\usr\\local\\ssl\\openssl.cnf configuration file to load a malicious OpenSSL engine, which may result in arbitrary code execution. This would give the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc."},{"lang":"es","value":"Se detectó un problema en Veritas CloudPoint versiones anteriores a la 8.3.0.1+hotfix.&#xa0;El CloudPoint Windows Agent aprovecha el OpenSSL.&#xa0;Esta biblioteca OpenSSL intenta cargar el archivo de configuración \\usr\\local\\ssl\\openssl.cnf, que no existe.&#xa0;Por defecto, en los sistemas Windows, los usuarios pueden crear directorios en (drive):\\.&#xa0;Un usuario poco privilegiado puede crear un archivo de configuración (drive):\\usr\\local\\ssl\\openssl.cnf para cargar un motor OpenSSL malicioso, resultando en una ejecución de código arbitraria.&#xa0;Esto le daría al atacante acceso de administrador al sistema, permitiendo al atacante (por defecto) acceder a todos los datos, acceder a todas las aplicaciones instaladas, etc"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:cloudpoint:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9FC8A714-5AD7-4223-B0B6-00DAA00A52CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:cloudpoint:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1680BD1-C6FB-4026-A7DB-3940D13C6F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:cloudpoint:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5AA2D930-D796-4BE5-81DA-99BE6568AA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:cloudpoint:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4A0BFE1C-A065-4C6A-BB38-374A51A8CAB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:cloudpoint:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"01F576F9-0BC7-497F-8DF7-D1169AD06C34"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:cloudpoint:2.1:*:*:*:*:*:*:*","matchCriteriaId":"92F21043-677F-481C-8B57-266E35E98B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:cloudpoint:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"48A6DCB8-4401-449A-B325-98FF65EC4613"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:cloudpoint:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"BF37DB9E-BB66-463F-862D-3455777F1FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:cloudpoint:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E7BC0855-A724-4CCA-B185-2BDCE2761A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:cloudpoint:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A65FA984-C993-4F3F-97B0-15B9410A19BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:cloudpoint:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"CB38DF3A-CE0F-4A04-AE1B-AA3CCFCC5884"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_cloudpoint:8.3:*:*:*:*:*:*:*","matchCriteriaId":"450E2586-EE96-4402-A5F8-40938C1D4A1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup_cloudpoint:8.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C976FE2-DBFF-4DD6-AB7C-1451AACD7E05"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-011","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-36164","sourceIdentifier":"cve@mitre.org","published":"2021-01-06T01:15:12.967","lastModified":"2026-06-17T03:14:52.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Veritas Enterprise Vault through 14.0. On start-up, it loads the OpenSSL library. The OpenSSL library then attempts to load the openssl.cnf configuration file (which does not exist) at the following locations in both the System drive (typically C:\\) and the product's installation drive (typically not C:\\): \\Isode\\etc\\ssl\\openssl.cnf (on SMTP Server) or \\user\\ssl\\openssl.cnf (on other affected components). By default, on Windows systems, users can create directories under C:\\. A low privileged user can create a openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This vulnerability only affects a server with MTP Server, SMTP Archiving IMAP Server, IMAP Archiving, Vault Cloud Adapter, NetApp File server, or File System Archiving for NetApp as File Server."},{"lang":"es","value":"Se detectó un problema en Veritas Enterprise Vault versiones hasta 14.0.&#xa0;Al iniciarse, carga la biblioteca OpenSSL.&#xa0;Luego, la biblioteca OpenSSL intenta cargar el archivo de configuración openssl.cnf (que no existe) en las siguientes ubicaciones tanto en la unidad del sistema (normalmente C:\\) como en la unidad de instalación del producto (normalmente no C:\\): \\Isode\\etc\\ssl\\openssl.cnf (en el servidor SMTP) o \\user\\ssl\\openssl.cnf (en otros componentes afectados).&#xa0;Por defecto, en los sistemas Windows, los usuarios pueden crear directorios en C:\\.&#xa0;Un usuario poco privilegiado puede crear un archivo de configuración openssl.cnf para cargar un motor OpenSSL malicioso, resultando en una ejecución de código arbitraria como SYSTEM cuando se inicia el servicio.&#xa0;Esto le otorga al atacante acceso de administrador al sistema, permitiendo al atacante (por defecto) acceder a todos los datos, acceder a todas las aplicaciones instaladas, etc. Esta vulnerabilidad solo afecta a un servidor con MTP Server, SMTP Archiving IMAP Server, IMAP Archiving, Vault Cloud Adapter , Servidor de archivos de NetApp o archivado del sistema de archivos para NetApp como servidor de archivos"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:enterprise_vault:*:*:*:*:*:*:*:*","versionEndIncluding":"14.0","matchCriteriaId":"29FDF02A-95FC-4676-98DF-DCD24A66CD2C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-013","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-36165","sourceIdentifier":"cve@mitre.org","published":"2021-01-06T01:15:13.027","lastModified":"2026-06-17T03:14:52.753","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Veritas Desktop and Laptop Option (DLO) before 9.4. On start-up, it loads the OpenSSL library from /ReleaseX64/ssl. This library attempts to load the /ReleaseX64/ssl/openssl.cnf configuration file, which does not exist. By default, on Windows systems, users can create directories under C:\\. A low privileged user can create a C:/ReleaseX64/ssl/openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This impacts DLO server and client installations."},{"lang":"es","value":"Se detectó un problema en Veritas Desktop and Laptop Option (DLO) versiones anteriores a 9.4.&#xa0;Al iniciarse, carga la biblioteca OpenSSL desde /ReleaseX64/ssl.&#xa0;Esta biblioteca intenta cargar el archivo de configuración /ReleaseX64/ssl/openssl.cnf, que no existe.&#xa0;Por defecto, en los sistemas Windows, los usuarios pueden crear directorios en C:\\.&#xa0;Un usuario poco privilegiado puede crear un archivo de configuración C:/ReleaseX64/ssl/openssl.cnf para cargar un motor OpenSSL malicioso, resultando en una ejecución de código arbitraria como SYSTEM cuando se inicia el servicio.&#xa0;Esto le otorga al atacante acceso de administrador al sistema, permitiendo al atacante (por defecto) acceder a todos los datos, acceder a todas las aplicaciones instaladas, etc. Esto afecta las instalaciones de cliente y de servidor de DLO"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:desktop_and_laptop_option:*:*:*:*:*:*:*:*","versionEndExcluding":"9.4","matchCriteriaId":"D15D4E8C-A9DE-4744-8A16-293677EB5D8C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-012","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-36166","sourceIdentifier":"cve@mitre.org","published":"2021-01-06T01:15:13.120","lastModified":"2026-06-17T03:14:52.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Veritas InfoScale 7.x through 7.4.2 on Windows, Storage Foundation through 6.1 on Windows, Storage Foundation HA through 6.1 on Windows, and InfoScale Operations Manager (aka VIOM) Windows Management Server 7.x through 7.4.2. On start-up, it loads the OpenSSL library from \\usr\\local\\ssl. This library attempts to load the \\usr\\local\\ssl\\openssl.cnf configuration file, which may not exist. On Windows systems, this path could translate to <drive>:\\usr\\local\\ssl\\openssl.cnf, where <drive> could be the default Windows installation drive such as C:\\ or the drive where a Veritas product is installed. By default, on Windows systems, users can create directories under any top-level directory. A low privileged user can create a <drive>:\\usr\\local\\ssl\\openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc."},{"lang":"es","value":"Se detectó un problema en Veritas InfoScale versiones 7.x hasta 7.4.2 en Windows, Storage Foundation versiones hasta 6.1 en Windows, Storage Foundation HA versiones hasta 6.1 en Windows e InfoScale Operations Manager (también se conoce como VIOM) Windows Management Server versiones 7.x hasta 7.4.2 .&#xa0;Al iniciarse, carga la biblioteca OpenSSL desde \\usr\\local\\ssl.&#xa0;Esta biblioteca intenta cargar el archivo de configuración \\usr\\local\\ssl\\openssl.cnf, que puede no estar presente.&#xa0;En los sistemas Windows, esta ruta podría traducirse a (drive):\\usr\\local\\ssl\\openssl.cnf, donde (drive) podría ser la unidad de instalación predeterminada de Windows, como C:\\ o la unidad donde está instalado un producto de Veritas.&#xa0;Por defecto, en los sistemas Windows, los usuarios pueden crear directorios en cualquier directorio de nivel superior.&#xa0;Un usuario poco privilegiado puede crear un archivo de configuración (drive):\\usr\\local\\ssl\\openssl.cnf para cargar un motor OpenSSL malicioso, resultando en una ejecución de código arbitraria como SYSTEM cuando se inicia el servicio.&#xa0;Esto le otorga al atacante acceso de administrador al sistema, permitiendo al atacante (por defecto) acceder a todos los datos, acceder a todas las aplicaciones instaladas, etc"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:infoscale:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.4.2","matchCriteriaId":"5C5CA35E-248F-44E2-A4E5-FD33422E8EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:infoscale_operations_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndIncluding":"7.4.2","matchCriteriaId":"91E5814D-0C90-480F-A154-D199AF6B7EF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:storage_foundation:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1","matchCriteriaId":"8CDDBD0A-1513-48DB-B8D1-D61F458B78F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:storage_foundation_and_high_availability:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1","matchCriteriaId":"AD526F29-512A-4713-86E1-878755557B29"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-014","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-36167","sourceIdentifier":"cve@mitre.org","published":"2021-01-06T01:15:13.183","lastModified":"2026-06-17T03:14:53.040","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517. On start-up, it loads the OpenSSL library from the Installation folder. This library in turn attempts to load the /usr/local/ssl/openssl.cnf configuration file, which may not exist. On Windows systems, this path could translate to <drive>:\\usr\\local\\ssl\\openssl.cnf. A low privileged user can create a :\\usr\\local\\ssl\\openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. If the system is also an Active Directory domain controller, then this can affect the entire domain."},{"lang":"es","value":"Se detectó un problema en el servidor en Veritas Backup Exec versiones hasta 16.2, versiones 20.6 anteriores a la hotfix 298543 y versiones 21.1 anteriores a la hotfix 657517. Al iniciar, carga la biblioteca OpenSSL desde la carpeta de instalación.&#xa0;Esta biblioteca, a su vez, intenta cargar el archivo de configuración /usr/local/ssl/openssl.cnf, que puede no estar presente.&#xa0;En sistemas Windows, esta ruta podría traducirse a (drive):\\usr\\local\\ssl\\openssl.cnf.&#xa0;Un usuario poco privilegiado puede crear un archivo de configuración:\\usr\\local\\ssl\\openssl.cnf para cargar un motor OpenSSL malicioso, resultando en una ejecución de código arbitraria como SYSTEM cuando se inicia el servicio.&#xa0;Esto le otorga al atacante acceso de administrador al sistema, permitiendo al atacante (por defecto) acceder a todos los datos, acceder a todas las aplicaciones instaladas, etc. Si el sistema también es un controlador de dominio de Active Directory, entonces esto puede afectar a todo el dominio"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:*:*:*","versionStartIncluding":"20.0","versionEndExcluding":"20.0.1188.2734","matchCriteriaId":"F8277D32-5E34-46FC-A896-3912828E9419"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:*:*:*","versionStartIncluding":"21.0","versionEndExcluding":"21.0.1200.1217","matchCriteriaId":"239D53F3-62B4-453D-AC84-CBA5DAFA59D9"}]}]}],"references":[{"url":"https://www.kb.cert.org/vuls/id/429301","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.kb.cert.org/vuls/id/429301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-36168","sourceIdentifier":"cve@mitre.org","published":"2021-01-06T01:15:13.230","lastModified":"2026-06-17T03:14:53.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Veritas Resiliency Platform 3.4 and 3.5. It leverages OpenSSL on Windows systems when using the Managed Host addon. On start-up, it loads the OpenSSL library. This library may attempt to load the openssl.cnf configuration file, which does not exist. By default, on Windows systems, users can create directories under C:\\. A low privileged user can create a C:\\usr\\local\\ssl\\openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc."},{"lang":"es","value":"Se detectó un problema en Veritas Resiliency Platform versiones 3.4 y 3.5.&#xa0;Aprovecha OpenSSL en sistemas Windows cuando usa el addon Managed Host.&#xa0;Al iniciarse, carga la biblioteca OpenSSL.&#xa0;Esta biblioteca puede intentar cargar el archivo de configuración openssl.cnf, que no estar presente.&#xa0;Por defecto, en los sistemas Windows, los usuarios pueden crear directorios en C:\\.&#xa0;Un usuario poco privilegiado puede crear un archivo de configuración C:\\usr\\local\\ssl\\openssl.cnf para cargar un motor OpenSSL malicioso, resultando en una ejecución de código arbitraria como SYSTEM cuando se inicia el servicio.&#xa0;Esto le otorga al atacante acceso de administrador al sistema, permitiendo al atacante (por defecto) acceder a todos los datos, acceder a todas las aplicaciones instaladas, etc"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:resiliency_platform:3.4:*:*:*:*:*:*:*","matchCriteriaId":"2F1740DF-9A34-4D97-8714-B10E73DCEB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:resiliency_platform:3.5:*:*:*:*:*:*:*","matchCriteriaId":"935C6831-9E89-4247-A6CE-F1A470C36328"}]}]}],"references":[{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-015","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-36169","sourceIdentifier":"cve@mitre.org","published":"2021-01-06T01:15:13.293","lastModified":"2026-06-17T03:14:53.320","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Veritas NetBackup through 8.3.0.1 and OpsCenter through 8.3.0.1. Processes using OpenSSL attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. By default, on Windows systems, users can create directories under the top level of any drive. If a low privileged user creates an affected path with a library that the Veritas product attempts to load, they can execute arbitrary code as SYSTEM or Administrator. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This vulnerability affects master servers, media servers, clients, and OpsCenter servers on the Windows platform. The system is vulnerable during an install or upgrade and post-install during normal operations."},{"lang":"es","value":"Se detectó un problema en Veritas NetBackup versiones hasta 8.3.0.1 y OpsCenter versiones hasta 8.3.0.1.&#xa0;Los procesos que usan OpenSSL intentan cargar y ejecutar bibliotecas desde rutas que no existen por defecto en el sistema operativo Windows.&#xa0;Por defecto, en sistemas Windows, los usuarios pueden crear directorios sobre el nivel superior de cualquier unidad.&#xa0;Si un usuario poco privilegiado crea una ruta afectada con una biblioteca que el producto de Veritas intenta cargar, puede ejecutar código arbitrario como SYSTEM o Administrator.&#xa0;Esto le otorga al atacante acceso de administrador al sistema, permitiendo al atacante (por defecto) acceder a todos los datos, acceder a todas las aplicaciones instaladas, etc. Esta vulnerabilidad afecta a los servidores maestros, servidores multimedia, clientes y servidores OpsCenter en la plataforma Windows.&#xa0;El sistema es vulnerable durante una instalación o actualización y después de la instalación durante las operaciones normales"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:*:*:*:*:*:*:*:*","versionEndIncluding":"8.3.0.1","matchCriteriaId":"8BF089A0-933D-4543-B0FF-8CF6700194B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:opscenter:*:*:*:*:*:*:*:*","versionEndIncluding":"8.3.0.1","matchCriteriaId":"6D8784FF-4C29-4CCB-A3A0-DEC2BFAAB7A3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-016#Issue1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.veritas.com/content/support/en_US/security/VTS20-016#Issue1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-26050","sourceIdentifier":"cve@mitre.org","published":"2021-01-12T03:15:12.750","lastModified":"2026-06-17T03:07:31.153","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SaferVPN for Windows Ver 5.0.3.3 through 5.0.4.15 could allow local privilege escalation from low privileged users to SYSTEM via a crafted openssl configuration file. This issue is similar to CVE-2019-12572."},{"lang":"es","value":"SaferVPN para Windows versiones 5.0.3.3 hasta 5.0.4.15, podría permitir una escalada de privilegios local de usuarios poco privilegiados a SYSTEM por medio de un archivo de configuración openssl diseñado.&#xa0;Este problema es similar a CVE-2019-12572"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:safervpn:safervpn:*:*:*:*:*:windows:*:*","versionStartIncluding":"5.0.3.3","versionEndIncluding":"5.0.4.15","matchCriteriaId":"E20D3C76-34A4-42A5-91C8-4527EA3CFBAD"}]}]}],"references":[{"url":"https://thebinary0x1.medium.com/cve-2020-26050-safervpn-for-windows-local-privilege-escalation-da069bb1373c","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://vimeo.com/459654003","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.safervpn.com/blog/updates-to-the-safervpn-windows-application/","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"https://thebinary0x1.medium.com/cve-2020-26050-safervpn-for-windows-local-privilege-escalation-da069bb1373c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://vimeo.com/459654003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.safervpn.com/blog/updates-to-the-safervpn-windows-application/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-26530","sourceIdentifier":"cve@mitre.org","published":"2021-02-08T21:15:13.803","lastModified":"2026-06-17T03:43:27.167","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 (compiled with OpenSSL support) is vulnerable to remote OOB write attack via connection request after exhausting memory pool."},{"lang":"es","value":"La función mg_tls_init en el servidor Cesanta Mongoose HTTPS versión 7.0 (compilado con soporte OpenSSL) es vulnerable  a un ataque de escritura OOB remota por medio de una petición de conexión después de agotar el grupo de memoria"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cesanta:mongoose:7.0:*:*:*:*:*:*:*","matchCriteriaId":"60B6E6E9-893D-4993-B8E4-906343FF7837"}]}]}],"references":[{"url":"https://github.com/cesanta/mongoose/issues/1204","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/cesanta/mongoose/issues/1204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-23839","sourceIdentifier":"openssl-security@openssl.org","published":"2021-02-16T17:15:13.190","lastModified":"2026-06-17T03:38:54.457","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x)."},{"lang":"es","value":"OpenSSL versión 1.0.2 soporta SSLv2. Si un cliente intenta negociar SSLv2 con un servidor que está configurado para soportar tanto SSLv2 como versiones más recientes de SSL y TLS, entonces se hace una comprobación de un ataque de retroceso de versión cuando se deshace una firma RSA. Los clientes que soportan versiones de SSL o TLS superiores a SSLv2 deben usar una forma especial de relleno. Un servidor que soporta una versión superior a SSLv2 debe rechazar los intentos de conexión de un cliente en el que esté presente esta forma especial de relleno, porque esto indica que se ha producido un retroceso de versión (es decir, tanto el cliente como el servidor soportan una versión superior a SSLv2, y sin embargo esta es la versión que se está requiriendo). La implementación de esta comprobación de padding invirtió la lógica para que el intento de conexión sea aceptado si el padding está presente, y rechazado si está ausente. Esto significa que tal servidor aceptará una conexión si se ha producido un ataque de retroceso de versión. Además, el servidor rechazará erróneamente una conexión si se realiza un intento de conexión SSLv2 normal. Sólo los servidores OpenSSL versión 1.0.2 desde la versión 1.0.2s hasta la 1.0.2x están afectados por este problema. Para ser vulnerable, un servidor versión 1.0.2 debe 1) haber configurado la compatibilidad con SSLv2 en tiempo de compilación (está desactivada por defecto), 2) haber configurado la compatibilidad con SSLv2 en tiempo de ejecución (está deshabilitada por defecto), 3) haber configurado los ciphersuites de SSLv2 (no están en la lista de ciphersuites por defecto) OpenSSL versión 1.1.1 no presenta compatibilidad con SSLv2 y, por tanto, no es vulnerable a este problema. El error subyacente está en la implementación de la función RSA_padding_check_SSLv23(). Esto también afecta al modo de relleno RSA_SSLV23_PADDING usado por otras funciones. Aunque la versión 1.1.1 no soporta SSLv2, la función RSA_padding_check_SSLv23() sigue existiendo, al igual que el modo de relleno RSA_SSLV23_PADDING. Las aplicaciones que llamen directamente a esa función o utilicen ese modo de relleno se encontrarán con este problema. Sin embargo, como no existe soporte para el protocolo SSLv2 en la versión 1.1.1, esto se considera un error y no un problema de seguridad en esa versión. OpenSSL versión 1.0.2 está fuera de soporte y ya no recibe actualizaciones públicas. Los clientes de soporte Premium de OpenSSL versión 1.0.2 deben actualizar a la versión 1.0.2y. Los demás usuarios deben actualizar a la versión 1.1.1j. Corregido en OpenSSL versión 1.0.2y (Afectó versiones 1.0.2s-1.0.2x)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-01T19:19:45.526222Z","id":"CVE-2021-23839","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2s","versionEndIncluding":"1.0.2x","matchCriteriaId":"3E90DD3D-CF27-4D49-973A-86E03225027B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"D40AD626-B23A-44A3-A6C0-1FFB4D647AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"B602F9E8-1580-436C-A26D-6E6F8121A583"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"77C3DD16-1D81-40E1-B312-50FBD275507C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"81DAC8C0-D342-44B5-9432-6B88D389584F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"61516569-C48F-4362-B334-8CA10EDB0EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B095CC03-7077-4A58-AB25-CC5380CDCE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"058C7C4B-D692-49DE-924A-C2725A8162D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:community:*:*:*","matchCriteriaId":"F325B4DE-1330-4DE2-B127-76FA14C3639B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:community:*:*:*","matchCriteriaId":"CEDB365B-ABB3-4E62-B8C6-5E3454270855"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*","matchCriteriaId":"0B1CAD50-749F-4ADB-A046-BF3585677A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D3E503FB-6279-4D4A-91D8-E237ECF9D2B0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0","matchCriteriaId":"C89891C1-DFD7-4E1F-80A9-7485D86A15B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*","matchCriteriaId":"4664B195-AF14-4834-82B3-0B2C98020EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*","matchCriteriaId":"75BC588E-CDF0-404E-AD61-02093A1DF343"}]}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547","source":"openssl-security@openssl.org"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210219-0009/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20210216.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210219-0009/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20210216.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-23840","sourceIdentifier":"openssl-security@openssl.org","published":"2021-02-16T17:15:13.300","lastModified":"2026-06-17T03:38:54.593","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x)."},{"lang":"es","value":"Las llamadas a EVP_CipherUpdate, EVP_EncryptUpdate y EVP_DecryptUpdate, pueden desbordar el argumento de la longitud de salida en algunos casos en los que la longitud de entrada está cerca de la longitud máxima permitida para un entero en la plataforma. En tales casos, el valor de retorno de la llamada a la función será 1 (indicando success), pero el valor de la longitud de salida será negativo. Esto podría causar que las aplicaciones se comporten de forma incorrecta o se bloqueen. Las versiones de OpenSSL 1.1.1i e inferiores están afectadas por este problema. Los usuarios de estas versiones deberían actualizar a OpenSSL versión 1.1.1j. Las versiones de OpenSSL 1.0.2x e inferiores están afectadas por este problema. Sin embargo, OpenSSL versión 1.0.2 está fuera de soporte y ya no recibe actualizaciones públicas. Los clientes con soporte Premium de OpenSSL versión 1.0.2 deben actualizar a la versión 1.0.2y. Los demás usuarios deben actualizar a la versión 1.1.1j. Corregido en OpenSSL versión 1.1.1j (Afectó versiones 1.1.1-1.1.1i). Corregido en OpenSSL versión 1.0.2y (Afectó versiones 1.0.2-1.0.2x)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-16T14:12:28.645674Z","id":"CVE-2021-23840","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2y","matchCriteriaId":"F12DBEEA-AAB3-4383-A3E2-F865B960BA07"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1j","matchCriteriaId":"90147138-26F0-42CF-A1DB-BE1853885CA6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.8","matchCriteriaId":"D2D529D0-539D-4540-B70C-230D09A87572"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:*","matchCriteriaId":"657682A0-54D5-4DC6-A98E-8BAF685926C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC5C76C-3474-4B26-8CF0-2DFAFA3D5458"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:*","matchCriteriaId":"8661D361-71B5-4C41-A818-C89EC551D900"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:*","matchCriteriaId":"253603DC-2D92-442A-B3A8-A63E14D8A070"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:*","matchCriteriaId":"8E112CFF-31F9-4D87-9A1B-AE0FCF69615E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"D40AD626-B23A-44A3-A6C0-1FFB4D647AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"B602F9E8-1580-436C-A26D-6E6F8121A583"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"77C3DD16-1D81-40E1-B312-50FBD275507C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"81DAC8C0-D342-44B5-9432-6B88D389584F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*","matchCriteriaId":"B4367D9B-BF81-47AD-A840-AC46317C774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"61516569-C48F-4362-B334-8CA10EDB0EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B095CC03-7077-4A58-AB25-CC5380CDCE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"058C7C4B-D692-49DE-924A-C2725A8162D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"0F0434A5-F2A1-4973-917C-A95F2ABE97D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"96DD93E0-274E-4C36-99F3-EEF085E57655"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.6.0","matchCriteriaId":"86305E47-33E9-411C-B932-08C395C09982"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*","matchCriteriaId":"0B1CAD50-749F-4ADB-A046-BF3585677A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7.33","matchCriteriaId":"C9E14DE8-29C1-4C0C-9B31-2E3A11EE68E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.15","versionEndExcluding":"8.0.23","matchCriteriaId":"FBE10671-5C91-4ACF-ABD2-255E9F2F9D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:nosql_database:*:*:*:*:*:*:*:*","versionEndExcluding":"20.3","matchCriteriaId":"D04565AE-D092-4AE0-8FEE-0E8114662A1B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*","versionEndExcluding":"5.10.0","matchCriteriaId":"A30F7908-5AF6-4761-BC6A-4C18EFAE48E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*","matchCriteriaId":"0F30D3AF-4FA3-4B7A-BE04-C24E2EA19A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*","matchCriteriaId":"7B00DDE7-7002-45BE-8EDE-65D964922CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DB88C165-BB24-49FB-AAF6-087A766D5AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*","matchCriteriaId":"FF806B52-DAD5-4D12-8BB6-3CBF9DC6B8DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*","matchCriteriaId":"7DE847E0-431D-497D-9C57-C4E59749F6A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*","matchCriteriaId":"46385384-5561-40AA-9FDE-A2DE4FDFAD3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*","matchCriteriaId":"B7CA7CA6-7CF2-48F6-81B5-69BA0A37EF4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*","matchCriteriaId":"9E4E5481-1070-4E1F-8679-1985DE4E785A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_7:*:*:*:*:*:*","matchCriteriaId":"D9EEA681-67FF-43B3-8610-0FA17FD279E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_8:*:*:*:*:*:*","matchCriteriaId":"C33BA8EA-793D-4E79-BE9C-235ACE717216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_9:*:*:*:*:*:*","matchCriteriaId":"823DBE80-CB8D-4981-AE7C-28F3FDD40451"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2410","matchCriteriaId":"5E63B7B2-409A-476E-BA12-2A2D2F3B85DE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*","matchCriteriaId":"983D27DE-BC89-454E-AE47-95A26A3651E2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2410","matchCriteriaId":"ADB5D4C9-DA14-4188-9181-17336F9445F6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*","matchCriteriaId":"5825AEE1-B668-40BD-86A9-2799430C742C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2410","matchCriteriaId":"0B65E2F3-57EC-46C0-BB4A-0A0F3F8D387E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*","matchCriteriaId":"3DA2D526-BDCF-4A65-914A-B3BA3A0CD613"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2410","matchCriteriaId":"90B7CFBF-761C-4EAA-A322-EF5E294AADED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*","matchCriteriaId":"EE0CF40B-E5BD-4558-9321-184D58EF621D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2410","matchCriteriaId":"48B28ABF-7E1A-4A1E-8F78-0D95D7BDF886"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*","matchCriteriaId":"0F3C9C09-7B2B-4DB6-8BE0-35302ED35776"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp2410","matchCriteriaId":"E74AAF52-1388-4BD9-B17B-3A6A32CA3608"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*","matchCriteriaId":"95503CE5-1D06-4092-A60D-D310AADCAFB1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3110","matchCriteriaId":"A107698C-9C63-44A9-8A2B-81EDD5702B4C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*","matchCriteriaId":"983D27DE-BC89-454E-AE47-95A26A3651E2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3110","matchCriteriaId":"0FC0460E-4695-44FB-99EE-28B2C957B760"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*","matchCriteriaId":"5825AEE1-B668-40BD-86A9-2799430C742C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3110","matchCriteriaId":"BD54A092-85A7-4459-9C69-19E6E24AC24B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*","matchCriteriaId":"3DA2D526-BDCF-4A65-914A-B3BA3A0CD613"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3110","matchCriteriaId":"5F813DBC-BA1E-4C73-AA11-1BD3F9508372"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*","matchCriteriaId":"EE0CF40B-E5BD-4558-9321-184D58EF621D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3110","matchCriteriaId":"EFDF4F39-1C6C-4AD3-99CF-BD5B44B8C71B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*","matchCriteriaId":"0F3C9C09-7B2B-4DB6-8BE0-35302ED35776"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"xcp3110","matchCriteriaId":"416B805F-799A-4466-AC5A-93D083A2ABBD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*","matchCriteriaId":"95503CE5-1D06-4092-A60D-D310AADCAFB1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"10.0.0","versionEndIncluding":"10.12.0","matchCriteriaId":"25A3180B-21AF-4010-9DAB-41ADFD2D8031"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"10.13.0","versionEndExcluding":"10.24.0","matchCriteriaId":"67D64118-C228-41AF-8193-F90A772AAB8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"12.0.0","versionEndIncluding":"12.12.0","matchCriteriaId":"564ED5C8-50D7-413A-B88E-E62B6C07336A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"12.13.0","versionEndExcluding":"12.21.0","matchCriteriaId":"F1D6CFAA-BEDB-40EB-BDE6-35BBA99F0BB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.14.0","matchCriteriaId":"428DCD7B-6F66-4F18-B780-5BD80143D482"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"15.0.0","versionEndExcluding":"15.10.0","matchCriteriaId":"E640EA36-17B2-4745-A831-AB8655F3579D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:14.15.0:*:*:*:lts:*:*:*","matchCriteriaId":"0425023F-CA30-4447-AD5C-B76556461CCC"}]}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2","source":"openssl-security@openssl.org"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10366","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","source":"openssl-security@openssl.org"},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/202103-03","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210219-0009/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2021/dsa-4855","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20210216.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-03","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-09","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-10","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202103-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210219-0009/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2021/dsa-4855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20210216.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-09","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-23841","sourceIdentifier":"openssl-security@openssl.org","published":"2021-02-16T17:15:13.377","lastModified":"2026-06-17T03:38:54.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x)."},{"lang":"es","value":"La función de la API pública de OpenSSL X509_issuer_and_serial_hash() intenta crear un valor hash único basado en los datos del emisor y del número de serie contenidos en un certificado X509. Sin embargo, no gestiona correctamente los errores que puedan producirse al analizar el campo del emisor (lo que podría ocurrir si el campo del emisor se construye de forma maliciosa). Esto puede dar lugar a un desvío de puntero NULL y a un fallo que conduzca a un posible ataque de denegación de servicio. La función X509_issuer_and_serial_hash() nunca es llamada directamente por OpenSSL, por lo que las aplicaciones sólo son vulnerables si utilizan esta función directamente y lo hacen con certificados que pueden haber sido obtenidos de fuentes no fiables. Las versiones de OpenSSL 1.1.1i y posteriores están afectadas por este problema. Los usuarios de estas versiones deberían actualizar a OpenSSL 1.1.1j. Las versiones de OpenSSL 1.0.2x e inferiores se ven afectadas por este problema. Sin embargo, OpenSSL 1.0.2 está fuera de soporte y ya no recibe actualizaciones públicas. Los clientes con soporte Premium de OpenSSL 1.0.2 deben actualizar a la versión 1.0.2y. Los demás usuarios deben actualizar a la versión 1.1.1j. Corregido en OpenSSL 1.1.1j (Afectado 1.1.1-1.1.1i). Corregido en OpenSSL 1.0.2y (Afectado 1.0.2-1.0.2x)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-26T20:18:08.118870Z","id":"CVE-2021-23841","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2y","matchCriteriaId":"F12DBEEA-AAB3-4383-A3E2-F865B960BA07"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1j","matchCriteriaId":"90147138-26F0-42CF-A1DB-BE1853885CA6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:*","matchCriteriaId":"657682A0-54D5-4DC6-A98E-8BAF685926C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC5C76C-3474-4B26-8CF0-2DFAFA3D5458"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:*","matchCriteriaId":"8661D361-71B5-4C41-A818-C89EC551D900"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:*","matchCriteriaId":"253603DC-2D92-442A-B3A8-A63E14D8A070"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:*","matchCriteriaId":"8E112CFF-31F9-4D87-9A1B-AE0FCF69615E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13.0","versionEndIncluding":"5.17.0","matchCriteriaId":"AC1721B5-9FCD-47C3-8338-E02932CF2C05"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*","versionEndExcluding":"14.1.1","matchCriteriaId":"FFDA8CE0-8F2C-4FA7-91F8-A720F56EBC5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*","versionEndExcluding":"14.6","matchCriteriaId":"168B0313-B7B6-4CD5-AD4F-C133050498BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"14.6","matchCriteriaId":"E1BB03E7-7DC3-404B-AD37-78849BE46420"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndExcluding":"11.4","matchCriteriaId":"617E79BC-1012-4778-BDE7-44A238CC8D7A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*","matchCriteriaId":"F1BE6C1F-2565-4E97-92AA-16563E5660A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*","matchCriteriaId":"5735E553-9731-4AAC-BCFF-989377F817B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","matchCriteriaId":"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"D40AD626-B23A-44A3-A6C0-1FFB4D647AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"B602F9E8-1580-436C-A26D-6E6F8121A583"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"77C3DD16-1D81-40E1-B312-50FBD275507C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"81DAC8C0-D342-44B5-9432-6B88D389584F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*","matchCriteriaId":"B4367D9B-BF81-47AD-A840-AC46317C774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"61516569-C48F-4362-B334-8CA10EDB0EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B095CC03-7077-4A58-AB25-CC5380CDCE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*","matchCriteriaId":"394A16F2-CCD4-44E5-BF6B-E0C782A9FA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"058C7C4B-D692-49DE-924A-C2725A8162D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"0F0434A5-F2A1-4973-917C-A95F2ABE97D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"96DD93E0-274E-4C36-99F3-EEF085E57655"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*","matchCriteriaId":"0B1CAD50-749F-4ADB-A046-BF3585677A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*","versionEndExcluding":"8.0.23","matchCriteriaId":"44B24982-87BE-4563-8B7E-D846607B641B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7.33","matchCriteriaId":"C9E14DE8-29C1-4C0C-9B31-2E3A11EE68E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.15","versionEndExcluding":"8.0.23","matchCriteriaId":"FBE10671-5C91-4ACF-ABD2-255E9F2F9D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","matchCriteriaId":"7E1E416B-920B-49A0-9523-382898C2979D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*","matchCriteriaId":"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*","matchCriteriaId":"C8AF00C6-B97F-414D-A8DF-057E6BFD8597"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D3E503FB-6279-4D4A-91D8-E237ECF9D2B0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0","matchCriteriaId":"C89891C1-DFD7-4E1F-80A9-7485D86A15B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*","matchCriteriaId":"4664B195-AF14-4834-82B3-0B2C98020EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*","matchCriteriaId":"75BC588E-CDF0-404E-AD61-02093A1DF343"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2021/May/67","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/May/68","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/May/70","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807","source":"openssl-security@openssl.org"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202103-03","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210219-0009/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210513-0002/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"openssl-security@openssl.org"},{"url":"https://support.apple.com/kb/HT212528","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT212529","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT212534","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4855","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20210216.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-03","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-09","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/May/67","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/May/68","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/May/70","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202103-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210219-0009/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210513-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT212528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT212529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT212534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20210216.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-09","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-3449","sourceIdentifier":"openssl-security@openssl.org","published":"2021-03-25T15:15:13.450","lastModified":"2026-10-08T22:17:11.243","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j)."},{"lang":"es","value":"Un servidor OpenSSL TLS puede cometer un fallo si un cliente envía un mensaje ClientHello de renegociación diseñado maliciosamente.&#xa0;Si una renegociación de TLSv1.2 ClientHello omite la extensión signature_algorithms (donde estaba presente en el ClientHello inicial), pero incluye una extensión signature_algorithms_cert, se producirá una desreferencia del puntero NULL, lo que conllevará un bloqueo y un ataque de denegación de servicio.&#xa0;Un servidor solo es vulnerable si tiene TLSv1.2 y la renegociación habilitada (que es la configuración predeterminada).&#xa0;Los clientes de OpenSSL TLS no están afectados por este problema.&#xa0;Todas las versiones de OpenSSL versión 1.1.1 están afectadas por este problema.&#xa0;Los usuarios de estas versiones deben actualizar a OpenSSL versión 1.1.1k.&#xa0;OpenSSL versión 1.0.2 no está afectado por este problema.&#xa0;Corregido en OpenSSL versión 1.1.1k (Afectadas versiones 1.1.1-1.1.1j)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-08T21:05:43.522199Z","id":"CVE-2021-3449","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1k","matchCriteriaId":"B213E696-A6D9-45E7-B4E4-E4CFE54ECEB8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*","matchCriteriaId":"73D9C08B-8F5B-40C4-A5BD-B00D2E4C012D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*","matchCriteriaId":"62A178A3-6A52-4981-9A27-FB07AD8AF778"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*","matchCriteriaId":"54A487B1-E5CE-4C76-87E8-518D24C5D86D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*","matchCriteriaId":"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:*","matchCriteriaId":"280AA828-6FA9-4260-8EC1-019423B966E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*","matchCriteriaId":"24B8DB06-590A-4008-B0AB-FCD1401C77C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*","matchCriteriaId":"F1BE6C1F-2565-4E97-92AA-16563E5660A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*","matchCriteriaId":"5735E553-9731-4AAC-BCFF-989377F817B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*","matchCriteriaId":"E7CF3019-975D-40BB-A8A4-894E62BD3797"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"361B791A-D336-4431-8F68-8135BEFFAEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","matchCriteriaId":"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*","matchCriteriaId":"8ADFF451-740F-4DBA-BD23-3881945D3E40"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.9","matchCriteriaId":"4ACF85D6-6B45-43DA-9C01-F0208186F014"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*","versionEndIncluding":"8.13.1","matchCriteriaId":"0AC12300-9051-4C70-9941-9FE5E64B4B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:*","matchCriteriaId":"657682A0-54D5-4DC6-A98E-8BAF685926C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC5C76C-3474-4B26-8CF0-2DFAFA3D5458"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:*","matchCriteriaId":"8661D361-71B5-4C41-A818-C89EC551D900"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:*","matchCriteriaId":"253603DC-2D92-442A-B3A8-A63E14D8A070"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:*","matchCriteriaId":"8E112CFF-31F9-4D87-9A1B-AE0FCF69615E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.13.0","versionEndIncluding":"5.17.0","matchCriteriaId":"AC1721B5-9FCD-47C3-8338-E02932CF2C05"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","matchCriteriaId":"A930E247-0B43-43CB-98FF-6CE7B8189835"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:8.2.19:*:*:*:*:*:*:*","matchCriteriaId":"DEA7F1FD-9FAB-4654-98B0-4588EEC8B69A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:9.2.10:*:*:*:*:*:*:*","matchCriteriaId":"868B2C4B-CE6B-41DA-A373-7D4FA51EFE9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"550F47A2-3393-481E-BC40-CE606BFA8776"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway_cloud_service:8.2.19:*:*:*:*:*:*:*","matchCriteriaId":"43392D27-6C07-41C7-A17F-10C433338CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway_cloud_service:9.2.10:*:*:*:*:*:*:*","matchCriteriaId":"8FBF6C4C-195F-49A7-861D-52677D9BE58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway_cloud_service:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"90732D53-E802-4E1B-B6C8-B1FDCE7905A4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:checkpoint:quantum_security_management_firmware:r80.40:*:*:*:*:*:*:*","matchCriteriaId":"A98B128A-C58E-48EC-B691-AF73126A0822"},{"vulnerable":true,"criteria":"cpe:2.3:o:checkpoint:quantum_security_management_firmware:r81:*:*:*:*:*:*:*","matchCriteriaId":"345B990F-C1C4-440B-804E-0A2882FE7C01"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:checkpoint:quantum_security_management:-:*:*:*:*:*:*:*","matchCriteriaId":"08601413-25E2-4977-B67A-C11A9D788EA8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:checkpoint:multi-domain_management_firmware:r80.40:*:*:*:*:*:*:*","matchCriteriaId":"EFC067CC-EB90-43F5-9674-089D5C611573"},{"vulnerable":true,"criteria":"cpe:2.3:o:checkpoint:multi-domain_management_firmware:r81:*:*:*:*:*:*:*","matchCriteriaId":"80B223A7-1039-445D-ABE1-5E481004D956"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:checkpoint:multi-domain_management:-:*:*:*:*:*:*:*","matchCriteriaId":"1584E1B4-412C-40E2-BF07-4E464692F2AE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*","matchCriteriaId":"A0002A29-8B42-445D-9EC4-58BC93194241"},{"vulnerable":true,"criteria":"cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81:*:*:*:*:*:*:*","matchCriteriaId":"3B0EDB21-9305-4601-AB96-A77BD00F311D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:*","matchCriteriaId":"9016DDF6-285C-4E64-88D0-29ECCEF048F8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_communications_policy_management:12.6.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"570DB369-A31B-4108-A7FD-09F674129603"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"61516569-C48F-4362-B334-8CA10EDB0EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*","matchCriteriaId":"394A16F2-CCD4-44E5-BF6B-E0C782A9FA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"058C7C4B-D692-49DE-924A-C2725A8162D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"0F0434A5-F2A1-4973-917C-A95F2ABE97D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"96DD93E0-274E-4C36-99F3-EEF085E57655"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.6.0","matchCriteriaId":"86305E47-33E9-411C-B932-08C395C09982"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*","matchCriteriaId":"0B1CAD50-749F-4ADB-A046-BF3585677A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.23","matchCriteriaId":"A8782A14-89B0-45EE-A5CB-FF715F5BA379"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.33","matchCriteriaId":"5C40ECC8-933B-47A4-8082-FCF0EF9C973E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.15","versionEndIncluding":"8.0.23","matchCriteriaId":"32714AD7-BCD1-4624-9923-5E6D927CF3CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.23","matchCriteriaId":"CB1A94E1-A6C6-488D-A74C-6C0B24637272"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","matchCriteriaId":"7E1E416B-920B-49A0-9523-382898C2979D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*","matchCriteriaId":"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*","matchCriteriaId":"C8AF00C6-B97F-414D-A8DF-057E6BFD8597"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*","versionStartIncluding":"17.7","versionEndIncluding":"17.12","matchCriteriaId":"08FA59A8-6A62-4B33-8952-D6E658F8DAC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*","matchCriteriaId":"10864586-270E-4ACF-BDCC-ECFCD299305F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*","matchCriteriaId":"38340E3C-C452-4370-86D4-355B6B4E0A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:*","matchCriteriaId":"E9C55C69-E22E-4B80-9371-5CD821D79FE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_backup:*:*:*:*:*:*:*:*","versionEndExcluding":"18.1.0.1.0","matchCriteriaId":"C01E8B82-71C7-4A4A-A70A-7B147524AB4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_global_desktop:5.6:*:*:*:*:*:*:*","matchCriteriaId":"9DA11710-9EA8-49B4-8FD1-3AEE442F6ADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D3E503FB-6279-4D4A-91D8-E237ECF9D2B0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0.0","versionEndExcluding":"10.2.1.0-17sv","matchCriteriaId":"6E8B6D50-D482-43E9-A20D-FA77FD59AE2D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:*","matchCriteriaId":"8E4A2B7B-40F5-4AE0-ACC7-E94B82435DBA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:capture_client:3.5:*:*:*:*:*:*:*","matchCriteriaId":"349EB4AE-65E3-42DC-8F9C-3A1A155324D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:7.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2BD8688A-2D55-4A7E-A143-1BD0FCF957B0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:ruggedcom_rcm1224_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2","matchCriteriaId":"5081E52B-E7C0-46BD-B1D0-2C70ABCC8831"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:ruggedcom_rcm1224:-:*:*:*:*:*:*:*","matchCriteriaId":"3747CDD7-E833-4B68-A362-77D6A2E9D888"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_lpe9403_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"058D21EA-E94C-4DDC-AD92-967DAC934457"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_lpe9403:-:*:*:*:*:*:*:*","matchCriteriaId":"52A77C9D-E59C-4397-B834-797D7B334A6B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2","matchCriteriaId":"424CD8EA-D8CB-40C7-8E0F-AC4B05C59C99"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*","matchCriteriaId":"DFB9921A-5204-40A3-88AB-B7755F5C6875"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_s602_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","matchCriteriaId":"858B6A84-5D0E-4E23-AE32-A45B51BAC8CF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_s602:-:*:*:*:*:*:*:*","matchCriteriaId":"F4D89D82-C2CE-44DC-A05B-B956F20BF4E3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_s612_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","matchCriteriaId":"D173626B-9C50-489F-8BA4-1C45E5F96526"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_s612:-:*:*:*:*:*:*:*","matchCriteriaId":"CA7B48D2-0D17-420D-AAE1-35E5C0BE2924"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2","matchCriteriaId":"E967F5FC-6F3E-4982-8813-CA1DAF3BE165"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*","matchCriteriaId":"E917CBBB-EF41-4113-B0CA-EB91889235E7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_s623_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","matchCriteriaId":"81F315D8-0B26-4442-B330-85124017A482"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_s623:-:*:*:*:*:*:*:*","matchCriteriaId":"F80D9A79-7984-462B-B4B9-6A4429422038"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_s627-2m_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1","matchCriteriaId":"6F20F735-7A70-4A24-9621-786F99C8F87D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_s627-2m:-:*:*:*:*:*:*:*","matchCriteriaId":"B51B40F8-71D2-4D2D-8EC2-CE154A6D7533"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_sc-600_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","matchCriteriaId":"973B8030-B630-4D67-B897-25A359A96185"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_sc-600:-:*:*:*:*:*:*:*","matchCriteriaId":"725C671B-D7A0-48CF-8A31-5F9C4173F1DD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_w700_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5","matchCriteriaId":"86EA8E3F-81BD-47BC-9834-A9B69CA7E70C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_w700:-:*:*:*:*:*:*:*","matchCriteriaId":"D3033B1E-57A6-4AE3-A861-7047CF8EAD79"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_w1700_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","matchCriteriaId":"BE116AD9-B55F-41C8-8B55-329809DB63E1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_w1700:-:*:*:*:*:*:*:*","matchCriteriaId":"5D9A73DD-4A21-4096-B4B6-A0A825E71006"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3","matchCriteriaId":"144CDF5E-7E07-428B-B4DF-C94992B3A44A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:*","matchCriteriaId":"6CB3CC2D-CBF0-4F53-A412-01BBC39E34C2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3","matchCriteriaId":"339FFBDF-6957-481F-84CE-878B5CAAD9C8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:*","matchCriteriaId":"7719E194-EE3D-4CE8-8C85-CF0D82A553AA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_xf-200ba_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3","matchCriteriaId":"6FBB13D3-4E04-4D01-B880-C16C4FFA240B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_xf-200ba:-:*:*:*:*:*:*:*","matchCriteriaId":"58377C58-F660-4C17-A3CB-BFC2F28848CD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_xm-400_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.4","matchCriteriaId":"E40058B3-3726-4F6A-AB41-7679487639F2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_xm-400:-:*:*:*:*:*:*:*","matchCriteriaId":"798E900F-5EF9-4B39-B8C2-79FAE659E7F5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3","matchCriteriaId":"1E642D10-E701-44DF-863B-D0DAA5530F50"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:*","matchCriteriaId":"8F962FC7-0616-467F-8CCA-ADEA224B5F7B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3","matchCriteriaId":"4A53C2B5-A3FD-44CC-A78B-D2124EF37DB4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:*","matchCriteriaId":"434BC9BE-C5DB-4DAF-8E07-DFE4EEA0D7FE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_xr524-8c_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.4","matchCriteriaId":"54FBE4D4-F31E-4B61-9216-44C8EC2988AB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:*:*","matchCriteriaId":"B0E6B7D8-3F9E-43D6-AEFE-DEE3993679C5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_xr526-8c_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.4","matchCriteriaId":"20511D61-FC1D-453E-BDF6-D3FB9951192A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:*:*","matchCriteriaId":"67661569-6233-4C74-9C72-88BD14B257FE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_xr528-6m_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.4","matchCriteriaId":"640AC619-B516-46FC-821B-09C4542A3FD6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_xr528-6m:-:*:*:*:*:*:*:*","matchCriteriaId":"3E048C4A-A414-4C87-A865-4D4218AE32EE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:scalance_xr552-12_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"6.4","matchCriteriaId":"1FB979DB-731B-4693-A9F8-B11ED953717C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:scalance_xr552-12:-:*:*:*:*:*:*:*","matchCriteriaId":"09743616-31C9-4E47-8A4A-B15D76204BE7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_cloud_connect_7_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1","matchCriteriaId":"886D2FE6-B054-4E3B-BACB-F08C0A119A80"},{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_cloud_connect_7_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"3B185B70-CAC9-47AC-8639-7A4707C21540"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_cloud_connect_7:-:*:*:*:*:*:*:*","matchCriteriaId":"9FA78457-260C-467B-9785-04B3C8EDF3B3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_cp_1242-7_gprs_v2_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","matchCriteriaId":"ABEA3BEE-E7AF-4C9A-ADE4-CE7FC1DB7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_cp_1242-7_gprs_v2_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"049460B8-6186-44F9-B41F-284A2EC0B3B4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_cp_1242-7_gprs_v2:-:*:*:*:*:*:*:*","matchCriteriaId":"205482DA-548C-4757-91F0-1599438873BD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_hmi_basic_panels_2nd_generation_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"45208694-635A-42AC-B668-8B67C60568B8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_hmi_basic_panels_2nd_generation:-:*:*:*:*:*:*:*","matchCriteriaId":"7D8F8BCE-35CE-492A-8BFE-2C36EA51CE5C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B4C147D9-4649-4289-B18B-55BD6E33521A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels:-:*:*:*:*:*:*:*","matchCriteriaId":"F4830E0D-0128-4E5B-AB81-2B238471AE4B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"54EFA8B5-8DA1-4547-9E15-BDC265C56006"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels:-:*:*:*:*:*:*:*","matchCriteriaId":"B1CEB200-E38F-4629-9279-5AF065396678"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_mv500_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"DE4FA1E6-4C5A-4CDC-AD40-E384C0BCA90D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_mv500:-:*:*:*:*:*:*:*","matchCriteriaId":"93A5B50E-0316-4189-8F41-54732CFCF63F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_net_cp_1243-1_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","matchCriteriaId":"D254DA1D-C53E-426B-9C69-580CC47CF0AA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_net_cp_1243-1:-:*:*:*:*:*:*:*","matchCriteriaId":"65278BA0-3C81-4D81-9801-D7BE3A1D7680"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_net_cp1243-7_lte_eu_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","matchCriteriaId":"C06A02ED-0BA3-4A2C-AF0C-689B8AEB34B8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_net_cp1243-7_lte_eu:-:*:*:*:*:*:*:*","matchCriteriaId":"209C7B1E-10F6-4215-AF69-CC36192E0FCE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_net_cp1243-7_lte_us_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","matchCriteriaId":"CF8C00EE-1154-440C-A223-A2CE99CE3126"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_net_cp1243-7_lte_us:-:*:*:*:*:*:*:*","matchCriteriaId":"171A9543-E677-422F-8AEA-1BC2D0E53593"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_net_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1","matchCriteriaId":"DB201DD3-8890-453E-A11E-1E13B3DAB3F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_net_cp_1243-8_irc:-:*:*:*:*:*:*:*","matchCriteriaId":"350FD323-C876-4C7A-A2E7-4B0660C87F6C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_net_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"2.1","matchCriteriaId":"61E498B1-87FF-454B-8DF0-61D0D3208491"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_net_cp_1542sp-1_irc:-:*:*:*:*:*:*:*","matchCriteriaId":"C1EE2F10-A7A6-486F-AE5C-53AE25BAF200"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_net_cp_1543-1_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2","versionEndExcluding":"3.0","matchCriteriaId":"90FB801F-11B5-438C-98A1-E928BFEA2ADB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_net_cp_1543-1:-:*:*:*:*:*:*:*","matchCriteriaId":"F56C2BDC-928E-491A-8E7C-F976B3787C7A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_net_cp_1543sp-1_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"2.1","matchCriteriaId":"8E4BA1E6-64F7-4B96-8302-134057DAB1BE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_net_cp_1543sp-1:-:*:*:*:*:*:*:*","matchCriteriaId":"783B50B8-2FB7-4982-88AA-B4F2AD094796"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_net_cp_1545-1_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","matchCriteriaId":"1DCA9544-DD17-4F56-B34C-91A3F37154AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_net_cp_1545-1:-:*:*:*:*:*:*:*","matchCriteriaId":"1256EB4B-DD8A-4F99-AE69-F74E8F789C63"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_pcs_7_telecontrol_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5C25165E-EDE9-42F1-A3B9-0E47630D49CC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_pcs_7_telecontrol:-:*:*:*:*:*:*:*","matchCriteriaId":"5BF281FB-26E0-43E4-A2B6-4015661368AC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_pcs_neo_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"6EEACFC9-41B7-4EE0-9427-692363880326"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_pcs_neo:-:*:*:*:*:*:*:*","matchCriteriaId":"EF3CA343-CA2A-4593-930C-158612CE7A55"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_pdm_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0.7","matchCriteriaId":"7E9AE23E-7DAE-4191-BA4E-A7CD655C4BC8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_pdm:-:*:*:*:*:*:*:*","matchCriteriaId":"E092B735-42D5-48D5-947B-288C0FA2E180"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_process_historian_opc_ua_server_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"2019","matchCriteriaId":"D874D636-392A-4750-B976-F411DBCEBA8D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_process_historian_opc_ua_server:-:*:*:*:*:*:*:*","matchCriteriaId":"14EC9343-7778-40B0-A74D-5C156FF2A229"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_rf166c_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"968FBB4E-5B0B-43D4-B3AD-418028093990"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_rf166c:-:*:*:*:*:*:*:*","matchCriteriaId":"391AD485-A49D-43D0-AAE5-1F58B38D4E22"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_rf185c_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5212F097-B65A-4D73-BB6F-49687F8AD980"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_rf185c:-:*:*:*:*:*:*:*","matchCriteriaId":"82494B5E-80EE-47ED-B87E-CF8C8907B6FE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_rf186c_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"D806113B-57EB-4AA0-9D5E-12E30337A93B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_rf186c:-:*:*:*:*:*:*:*","matchCriteriaId":"9B0933EB-82BE-42BB-978B-C9EC2FE1C795"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_rf186ci_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"53FA50A7-2DF6-454E-8A8E-838C392AB417"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_rf186ci:-:*:*:*:*:*:*:*","matchCriteriaId":"1EAEB335-BD22-4CEF-A3EA-9D98A09FEBF0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_rf188c_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"7F3D41E9-58B3-4251-8710-A8C4A24ABBD3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_rf188c:-:*:*:*:*:*:*:*","matchCriteriaId":"E21F9909-8D80-40BE-81E0-6ED7FE140A3A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_rf188ci_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"FC628CB7-0816-4267-9C5D-954BD0233D2E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_rf188ci:-:*:*:*:*:*:*:*","matchCriteriaId":"B0927991-E820-4FC3-9EFE-96E4C9BFCCCD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_rf360r_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"88E64167-16AA-48D7-BCDC-B15D37FA666D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_rf360r:-:*:*:*:*:*:*:*","matchCriteriaId":"63F05227-208B-42C8-8D56-A5D106CAD32F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_s7-1200_cpu_1211c_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"47F1294A-1C26-4D43-9C53-D833F2510536"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1200_cpu_1211c:-:*:*:*:*:*:*:*","matchCriteriaId":"3871C0C9-C65E-4E0B-9CA8-75E60066297F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_s7-1200_cpu_1212c_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4AF60081-D534-44F5-972F-23257F16F372"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212c:-:*:*:*:*:*:*:*","matchCriteriaId":"07849777-92E7-41D2-9128-F8D20DE15391"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_s7-1200_cpu_1212fc_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"AEF1726E-B56F-4D39-AFF4-E79A3CA00DE6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212fc:-:*:*:*:*:*:*:*","matchCriteriaId":"68B3573B-A31E-4489-B2DD-B01B5C1D03CB"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214_fc_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"9CC4A9F7-9858-4F95-8097-F8D09DA61314"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214_fc:-:*:*:*:*:*:*:*","matchCriteriaId":"B640800C-9263-4BEA-9DA5-1323932540BD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214c_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4948734A-0AAD-4D28-B7FF-FFBBB9AA39C6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214c:-:*:*:*:*:*:*:*","matchCriteriaId":"FE17584A-BF7A-48B8-A9CB-477663766C63"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214_fc_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"9CC4A9F7-9858-4F95-8097-F8D09DA61314"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214_fc:-:*:*:*:*:*:*:*","matchCriteriaId":"B640800C-9263-4BEA-9DA5-1323932540BD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_s7-1200_cpu_1215_fc_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"6EE37798-B068-40E5-BC03-1D8D303E5926"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215_fc:-:*:*:*:*:*:*:*","matchCriteriaId":"76C7D55C-8D99-4E2F-A254-1BDE2B12A203"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_s7-1200_cpu_1215c_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8E0C491C-5C4A-4F1C-ABD4-9502A54AAA78"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215c:-:*:*:*:*:*:*:*","matchCriteriaId":"CC4698CF-F935-4707-BA91-7E3650C7956C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_s7-1200_cpu_1217c_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E7657063-1296-4734-B108-A2FF7A01B07F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1200_cpu_1217c:-:*:*:*:*:*:*:*","matchCriteriaId":"232279DE-CF1C-4A3C-886D-B4CE3F104F09"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\\/dp_mfp_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8C477CCD-06C7-4907-8B0C-4FCE7F6DADAD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn\\/dp_mfp:-:*:*:*:*:*:*:*","matchCriteriaId":"3BC4FA01-8DDB-41E4-B759-7B504F78AEBC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:sinamics_connect_300_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3360ACCE-E735-4E34-B278-0D4460E74CBF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:sinamics_connect_300:-:*:*:*:*:*:*:*","matchCriteriaId":"7B854F5B-78C7-41FE-9364-5E71B36342A3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"2.2","matchCriteriaId":"D2B20D95-C4B3-4D13-A3D8-F22AC42DC059"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:*","matchCriteriaId":"C1D94BEB-BBFB-4258-9835-87DBBB999239"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_logon:*:*:*:*:*:*:*:*","versionStartIncluding":"1.6.0.2","matchCriteriaId":"D6F24E40-F3F0-48F3-B3DC-5F98B0564F7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_logon:1.5:sp3_update_1:*:*:*:*:*:*","matchCriteriaId":"423359E5-9C36-4C6B-AB24-B030E6C61D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:*","matchCriteriaId":"79EE15DC-74D3-4551-AAD0-EA0CB600DA76"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_wincc_telecontrol:-:*:*:*:*:*:*:*","matchCriteriaId":"F3169FD3-CBA2-417C-95EF-4F8AE9FAB5AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_nms:1.0:-:*:*:*:*:*:*","matchCriteriaId":"4ED13FC8-63C0-42C6-A51C-C480C45327C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_nms:1.0:sp1:*:*:*:*:*:*","matchCriteriaId":"E68FE047-8F53-46B8-82D4-9342B1C8CA55"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_pni:-:*:*:*:*:*:*:*","matchCriteriaId":"1353DC31-FB12-427A-B1B2-9164A4BEE14B"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinema_server:14.0:-:*:*:*:*:*:*","matchCriteriaId":"B0A5CC25-A323-4D49-8989-5A417D12D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinema_server:14.0:sp1:*:*:*:*:*:*","matchCriteriaId":"A690BCD3-6497-43F7-8A51-E033B9121DC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinema_server:14.0:sp2:*:*:*:*:*:*","matchCriteriaId":"AA375D44-ECC5-4BD3-A3D5-6D2AA68782D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinema_server:14.0:sp2_update1:*:*:*:*:*:*","matchCriteriaId":"6CD26C73-B61F-424B-91C2-352E2CAE6666"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinema_server:14.0:sp2_update2:*:*:*:*:*:*","matchCriteriaId":"DB4EA15F-ECA4-477F-948F-490FC90BC66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinumerik_opc_ua_server:*:*:*:*:*:*:*:*","matchCriteriaId":"ABA14E65-214C-431D-A49A-D8FC142D4541"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:tia_administrator:*:*:*:*:*:*:*:*","matchCriteriaId":"915B09CB-CA0A-445B-89D3-16AE9B08858E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.1.1","matchCriteriaId":"B0F46497-4AB0-49A7-9453-CC26837BF253"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"10.0.0","versionEndIncluding":"10.12.0","matchCriteriaId":"25A3180B-21AF-4010-9DAB-41ADFD2D8031"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"10.13.0","versionEndIncluding":"10.24.0","matchCriteriaId":"43B199B4-D89C-483D-ACAE-6CB2A59EE67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"12.0.0","versionEndIncluding":"12.12.0","matchCriteriaId":"564ED5C8-50D7-413A-B88E-E62B6C07336A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"12.13.0","versionEndExcluding":"12.22.1","matchCriteriaId":"3DEBF7C8-B000-47B9-B597-DC440F2603B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.14.0","matchCriteriaId":"428DCD7B-6F66-4F18-B780-5BD80143D482"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"14.15.0","versionEndExcluding":"14.16.1","matchCriteriaId":"380D03F3-6A7E-43A2-B002-FB2521FD3C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"15.0.0","versionEndExcluding":"15.14.0","matchCriteriaId":"3ED4D313-F372-4CC1-BE11-6BBA2F0E90E3"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2021/03/27/1","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/27/2","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/28/3","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/28/4","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148","source":"openssl-security@openssl.org"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10356","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/","source":"openssl-security@openssl.org"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202103-03","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210326-0006/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210513-0002/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"openssl-security@openssl.org"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4875","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20210325.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-05","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-06","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-09","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-10","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/27/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/27/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/28/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202103-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210326-0006/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210513-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20210325.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-05","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-09","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-3450","sourceIdentifier":"openssl-security@openssl.org","published":"2021-03-25T15:15:13.560","lastModified":"2026-10-08T21:17:40.070","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a \"purpose\" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named \"purpose\" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j)."},{"lang":"es","value":"El flag X509_V_FLAG_X509_STRICT permite llevar a cabo comprobaciones de seguridad adicionales de los certificados presentes en una cadena de certificados. No está establecido por defecto. A partir de la versión 1.1.1h de OpenSSL, se añadió como comprobación estricta adicional la de no permitir certificados en la cadena que tengan parámetros de curva elíptica codificados explícitamente. Un error en la implementación de esta comprobación significaba que el resultado de una comprobación previa para confirmar que los certificados de la cadena son certificados de CA válidos fueron sobrescritos. De este modo, se omite la comprobación de que los certificados que no son de CA no deben poder emitir otros certificados. Si se ha configurado un \"purpose\", se presenta la posibilidad de comprobar posteriormente que el certificado es una CA válida. Todos los valores de \"purpose\" implementados en libcrypto llevan a cabo esta comprobación. Por lo tanto, cuando se establece un propósito, la cadena de certificados seguirá siendo rechazada inclusive cuando se haya usado el flag strict. Se establece un propósito por defecto en las rutinas de verificación de certificados de cliente servidor de libssl, pero puede ser anulado o eliminado por una aplicación. Para que se vea afectada, una aplicación debe establecer explícitamente el flag de verificación X509_V_FLAG_X509_STRICT y no establecer un propósito para la verificación de certificados o, en el caso de las aplicaciones de cliente o servidor TLS, anular el propósito por defecto. Este problema afecta a las versiones 1.1.1h y posteriores de OpenSSL. Los usuarios de estas versiones deben actualizar a OpenSSL versión 1.1.1k. OpenSSL versión 1.0.2 no está afectado por este problema. Corregido en OpenSSL versión 1.1.1k (Afectadas versiones 1.1.1h-1.1.1j)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-08T21:02:24.642640Z","id":"CVE-2021-3450","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1h","versionEndExcluding":"1.1.1k","matchCriteriaId":"34F17CB9-A706-45F7-ADCB-F095B0581798"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*","matchCriteriaId":"73D9C08B-8F5B-40C4-A5BD-B00D2E4C012D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*","matchCriteriaId":"62A178A3-6A52-4981-9A27-FB07AD8AF778"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*","matchCriteriaId":"54A487B1-E5CE-4C76-87E8-518D24C5D86D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:santricity_smi-s_provider_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"255C64D2-51AF-425B-8A01-91DB4D126812"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"FC1E143B-C678-4F62-B51C-CF2A22E11B12"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:storagegrid_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"AA225A10-CED4-484F-ADDB-932FAAECAF5D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:storagegrid:-:*:*:*:*:*:*:*","matchCriteriaId":"151055B2-9F63-420B-97F4-A434BFBC9A06"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:linux:-:*:*:*:cd:*:*:*","matchCriteriaId":"1662CB7A-B0E8-4D57-AEE4-2115F682D2BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:linux:17.0:*:*:*:lts:*:*:*","matchCriteriaId":"7B99877A-BCA1-49D0-99E6-F95409821B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:linux:18.0:*:*:*:lts:*:*:*","matchCriteriaId":"6F7913BB-308B-47B0-80FC-F820784843EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:linux:19.0:*:*:*:lts:*:*:*","matchCriteriaId":"67613657-08D6-4CBF-AAF4-9355054D24C4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:*","matchCriteriaId":"280AA828-6FA9-4260-8EC1-019423B966E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*","matchCriteriaId":"5735E553-9731-4AAC-BCFF-989377F817B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*","matchCriteriaId":"E7CF3019-975D-40BB-A8A4-894E62BD3797"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*","matchCriteriaId":"8ADFF451-740F-4DBA-BD23-3881945D3E40"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","matchCriteriaId":"A930E247-0B43-43CB-98FF-6CE7B8189835"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*","versionEndIncluding":"8.13.1","matchCriteriaId":"0AC12300-9051-4C70-9941-9FE5E64B4B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.1","versionEndIncluding":"8.2.3","matchCriteriaId":"DB8B7710-2558-4153-B018-55943E10CBE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:*","matchCriteriaId":"657682A0-54D5-4DC6-A98E-8BAF685926C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC5C76C-3474-4B26-8CF0-2DFAFA3D5458"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:*","matchCriteriaId":"8661D361-71B5-4C41-A818-C89EC551D900"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:*","matchCriteriaId":"253603DC-2D92-442A-B3A8-A63E14D8A070"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:*","matchCriteriaId":"8E112CFF-31F9-4D87-9A1B-AE0FCF69615E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2A3622F5-5976-4BBC-A147-FC8A6431EA79"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"61516569-C48F-4362-B334-8CA10EDB0EC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*","matchCriteriaId":"058C7C4B-D692-49DE-924A-C2725A8162D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"0F0434A5-F2A1-4973-917C-A95F2ABE97D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*","matchCriteriaId":"96DD93E0-274E-4C36-99F3-EEF085E57655"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.6.0","matchCriteriaId":"86305E47-33E9-411C-B932-08C395C09982"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*","matchCriteriaId":"0B1CAD50-749F-4ADB-A046-BF3585677A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.23","matchCriteriaId":"A8782A14-89B0-45EE-A5CB-FF715F5BA379"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.23","matchCriteriaId":"F48F2267-61EA-4F12-ADE9-85CB6F6B290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.33","matchCriteriaId":"5C40ECC8-933B-47A4-8082-FCF0EF9C973E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.15","versionEndIncluding":"8.0.23","matchCriteriaId":"32714AD7-BCD1-4624-9923-5E6D927CF3CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.23","matchCriteriaId":"CB1A94E1-A6C6-488D-A74C-6C0B24637272"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:*","versionStartIncluding":"8.57","versionEndIncluding":"8.59","matchCriteriaId":"73DC7DDB-3405-4734-9A8E-7E1D4646CDEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_backup:*:*:*:*:*:*:*:*","versionEndExcluding":"18.1.0.1.0","matchCriteriaId":"C01E8B82-71C7-4A4A-A70A-7B147524AB4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_global_desktop:5.6:*:*:*:*:*:*:*","matchCriteriaId":"9DA11710-9EA8-49B4-8FD1-3AEE442F6ADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"04BCDC24-4A21-473C-8733-0D9CFB38A752"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:8.2.19:*:*:*:*:*:*:*","matchCriteriaId":"DEA7F1FD-9FAB-4654-98B0-4588EEC8B69A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:9.2.10:*:*:*:*:*:*:*","matchCriteriaId":"868B2C4B-CE6B-41DA-A373-7D4FA51EFE9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"550F47A2-3393-481E-BC40-CE606BFA8776"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway_cloud_service:8.2.19:*:*:*:*:*:*:*","matchCriteriaId":"43392D27-6C07-41C7-A17F-10C433338CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway_cloud_service:9.2.10:*:*:*:*:*:*:*","matchCriteriaId":"8FBF6C4C-195F-49A7-861D-52677D9BE58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:web_gateway_cloud_service:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"90732D53-E802-4E1B-B6C8-B1FDCE7905A4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"10.2.1.0-17sv","matchCriteriaId":"B1F6C5D7-AEC1-4792-BBA7-A83542430E1A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:*","matchCriteriaId":"8E4A2B7B-40F5-4AE0-ACC7-E94B82435DBA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:capture_client:*:*:*:*:*:*:*:*","versionEndExcluding":"3.6.24","matchCriteriaId":"1F7545BE-AB25-4BB7-8091-8D03BBD910A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.11","matchCriteriaId":"F0B75C3A-7E3A-434A-A045-44A071CB193B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1-r1456","matchCriteriaId":"50478447-8102-4BC4-9E96-3165B20B8BE8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.24.1","matchCriteriaId":"5C547B5B-8C6D-49AF-90D4-2F6E2F7E512B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"12.0.0","versionEndExcluding":"12.22.1","matchCriteriaId":"3469E4CF-1739-4BE4-B513-4DC771CD2805"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"14.0.0","versionEndExcluding":"14.16.1","matchCriteriaId":"1D2CA9D6-98EE-44B7-9C9D-5A6B55BCA025"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"15.0.0","versionEndExcluding":"15.14.0","matchCriteriaId":"3ED4D313-F372-4CC1-BE11-6BBA2F0E90E3"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2021/03/27/1","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/27/2","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/28/3","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/28/4","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b","source":"openssl-security@openssl.org"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10356","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/","source":"openssl-security@openssl.org"},{"url":"https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html","source":"openssl-security@openssl.org","tags":["Mailing List","Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202103-03","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210326-0006/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20210325.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-05","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-08","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-09","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/27/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/27/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/28/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/03/28/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202103-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210326-0006/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20210325.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-05","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-08","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-09","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-3446","sourceIdentifier":"secalert@redhat.com","published":"2021-03-25T19:15:14.703","lastModified":"2026-06-17T04:05:06.950","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality."},{"lang":"es","value":"Se encontró un fallo en libtpms en versiones anteriores a 0.8.2.&#xa0;La integración comúnmente usada de libtpms con OpenSSL contenía una vulnerabilidad relacionada con el IV devuelto (vector de inicialización) cuando se usaban determinados cifrados simétricos.&#xa0;En lugar de devolver el último IV, devolvió el IV inicial a la persona que llama, debilitando así los pasos posteriores de cifrado y descifrado.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad de los datos"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"libtpms","versions":[{"version":"libtpms 0.8.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-327"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtpms_project:libtpms:*:*:*:*:*:*:*:*","versionEndExcluding":"0.8.2","matchCriteriaId":"8A078392-00E4-43DC-BA7C-B707184FE088"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*","matchCriteriaId":"3AA08768-75AF-4791-B229-AE938C780959"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*","matchCriteriaId":"E460AA51-FCDA-46B9-AE97-E6676AA5E194"}]}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939664","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-28018","sourceIdentifier":"cve@mitre.org","published":"2021-05-06T13:15:09.560","lastModified":"2026-06-17T03:10:00.643","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL."},{"lang":"es","value":"Exim 4 versiones anteriores a 4.94.2, permite un Uso de la Memoria Previamente Liberada en la función smtp_reset en determinadas situaciones que pueden ser comunes para unas compilaciones con OpenSSL"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*","versionStartIncluding":"4.90","versionEndExcluding":"4.94.2","matchCriteriaId":"E841C3DD-AD28-4335-815A-E094516E50B8"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2021/05/11/14","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/11/15","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/11/17","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/11/5","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/11/6","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/12/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/12/3","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28018-OCORK.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/11/14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/11/15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/11/17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/11/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/11/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/12/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/05/12/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28018-OCORK.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-32489","sourceIdentifier":"cve@mitre.org","published":"2021-05-10T22:15:06.213","lastModified":"2026-06-17T03:53:03.050","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not correctly validate the embedded length field of an authenticated message received from the device because response_msg.st.len=8 can be accepted but triggers an integer overflow, which causes CRYPTO_cbc128_decrypt (in OpenSSL) to encounter an undersized buffer and experience a segmentation fault. The yubihsm-shell project is included in the YubiHSM 2 SDK product."},{"lang":"es","value":"Se detectó un problema en la función _send_secure_msg() de Yubico yubihsm-shell versiones hasta 2.0.3.&#xa0;La función no comprueba correctamente el campo de longitud insertado de un mensaje autenticado recibido del dispositivo porque response_msg.st.len=8 puede ser aceptado pero desencadena un desbordamiento de enteros, lo que causa a CRYPTO_cbc128_decrypt (en OpenSSL) encuentre un búfer de tamaño insuficiente y experimente un fallo de segmentación.&#xa0;El proyecto yubihsm-shell está incluido en el producto YubiHSM 2 SDK"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yubico:yubihsm-shell:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.3","matchCriteriaId":"9F7C9BAC-A77B-4333-A29C-4EABAF1B7003"}]}]}],"references":[{"url":"https://blog.inhq.net/posts/yubico-libyubihsm-vuln2/#second-attack-variant-cve-pending","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://blog.inhq.net/posts/yubico-libyubihsm-vuln2/#second-attack-variant-cve-pending","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-3423","sourceIdentifier":"cve-requests@bitdefender.com","published":"2021-05-18T11:15:07.647","lastModified":"2026-06-17T04:05:03.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Security allows an attacker to load a third party DLL to elevate privileges. This issue affects Bitdefender GravityZone Business Security versions prior to 6.6.23.329."},{"lang":"es","value":"Una vulnerabilidad del elemento de ruta de búsqueda no controlada en el componente openssl como es usado en Bitdefender GravityZone Business Security, permite a un atacante cargar una DLL de terceros para escalar privilegios.&#xa0;Este problema afecta a Bitdefender GravityZone Business Security versiones anteriores a 6.6.23.329"}],"affected":[{"source":"cve-requests@bitdefender.com","affectedData":[{"vendor":"BItdefender","product":"GravityZone Business Security","versions":[{"version":"unspecified","lessThan":"6.6.23.329","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve-requests@bitdefender.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.1,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"cve-requests@bitdefender.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitdefender:gravityzone_business_security:*:*:*:*:*:*:*:*","versionEndExcluding":"6.6.23.329","matchCriteriaId":"EB79C8A5-2085-4D8E-BCB3-33341C1F5F0E"}]}]}],"references":[{"url":"https://www.bitdefender.com/support/security-advisories/privilege-escalation-in-bitdefender-gravityzone-business-security-va-9557","source":"cve-requests@bitdefender.com","tags":["Vendor Advisory"]},{"url":"https://www.bitdefender.com/support/security-advisories/privilege-escalation-in-bitdefender-gravityzone-business-security-va-9557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-22901","sourceIdentifier":"support@hackerone.com","published":"2021-06-11T16:15:11.120","lastModified":"2026-10-14T11:16:53.157","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote code execution in the client. When libcurl at run-time sets up support for TLS 1.3 session tickets on a connection using OpenSSL, it stores pointers to the transfer in-memory object for later retrieval when a session ticket arrives. If the connection is used by multiple transfers (like with a reused HTTP/1.1 connection or multiplexed HTTP/2 connection) that first transfer object might be freed before the new session is established on that connection and then the function will access a memory buffer that might be freed. When using that memory, libcurl might even call a function pointer in the object, making it possible for a remote code execution if the server could somehow manage to get crafted memory content into the correct place in memory."},{"lang":"es","value":"curl versiones 7.75.0 hasta 7.76.1 sufre de una vulnerabilidad de uso de la memoria previamente liberada que resulta en el uso de memoria ya liberada cuando un ticket de sesión TLS 1.3 llega a través de una conexión. Un servidor malicioso puede usar esto en raras circunstancias desafortunadas para alcanzar potencialmente la ejecución de código remota en el cliente. Cuando libcurl en tiempo de ejecución configura el soporte para tickets de sesión TLS 1.3 en una conexión usando OpenSSL, almacena punteros al objeto de transferencia en memoria para su posterior recuperación cuando llega un ticket de sesión. Si la conexión es usada por múltiples transferencias (como en el caso de una conexión HTTP/1.1 reutilizada o una conexión HTTP/2 multiplexada) ese primer objeto de transferencia podría ser liberado antes de que se establezca la nueva sesión en esa conexión y entonces la función accederá a un búfer de memoria que podría ser liberado. Al utilizar esa memoria, libcurl podría incluso llamar a un puntero de función en el objeto, haciendo posible una ejecución de código remota si el servidor pudiera de alguna manera conseguir el contenido de la memoria diseñada en el lugar correcto de la memoria"}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"n/a","product":"https://github.com/curl/curl","versions":[{"version":"7.75.0 through 7.76.1","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-08T20:56:54.242206Z","id":"CVE-2021-22901","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"support@hackerone.com","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*","versionStartIncluding":"7.75.0","versionEndIncluding":"7.76.1","matchCriteriaId":"220650BF-E1B2-41F9-A9FA-978356E63FB7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.11.0:*:*:*:*:*:*:*","matchCriteriaId":"10323322-F6C0-4EA7-9344-736F7A80AA5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"C2A5B24D-BDF2-423C-98EA-A40778C01A05"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.0:*:*:*:*:*:*:*","matchCriteriaId":"6F60E32F-0CA0-4C2D-9848-CB92765A9ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.15.1:*:*:*:*:*:*:*","matchCriteriaId":"DF616620-88CE-4A77-B904-C1728A2E6F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"3AA09838-BF13-46AC-BB97-A69F48B73A8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.15.0:*:*:*:*:*:*:*","matchCriteriaId":"175B97A7-0B00-4378-AD9F-C01B6D9FD570"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:essbase:*:*:*:*:*:*:*:*","versionEndExcluding":"11.1.2.4.047","matchCriteriaId":"6A0BD5BD-E2F8-4B4E-B5CF-9787E6F2E4AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:essbase:*:*:*:*:*:*:*:*","versionStartIncluding":"21.0","versionEndExcluding":"21.3","matchCriteriaId":"3197F464-F0A5-4BD4-9068-65CD448D8F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.34","matchCriteriaId":"10630209-CF90-455D-B70F-DB50BAFC5499"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.25","matchCriteriaId":"181677F8-59EE-49BC-91A7-845819742869"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*","matchCriteriaId":"E8F29E19-3A64-4426-A2AA-F169440267CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*","matchCriteriaId":"B55E8D50-99B4-47EC-86F9-699B67D473CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*","matchCriteriaId":"5C2089EE-5D7F-47EC-8EA5-0F69790564C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*","matchCriteriaId":"F1BE6C1F-2565-4E97-92AA-16563E5660A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*","matchCriteriaId":"5735E553-9731-4AAC-BCFF-989377F817B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","matchCriteriaId":"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire\\,_enterprise_sds_\\&_hci_storage_node:-:*:*:*:*:*:*:*","matchCriteriaId":"DAA3919C-B2B1-4CB5-BA76-7A079AAFFC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*","matchCriteriaId":"D6D700C5-F67F-4FFB-BE69-D524592A3D2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F921BC85-568E-4B69-A3CD-CF75C76672F1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*","matchCriteriaId":"AD7447BC-F315-4298-A822-549942FC118B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"108A2215-50FB-4074-94CF-C130FA14566D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*","matchCriteriaId":"7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6770B6C3-732E-4E22-BF1C-2D2FD610061C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*","matchCriteriaId":"9F9C8C20-42EB-4AB5-BD97-212DEB070C43"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D0B4AD8A-F172-4558-AEC6-FF424BA2D912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*","matchCriteriaId":"8497A4C9-8474-4A62-8331-3FE862ED4098"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"32F0B6C0-F930-480D-962B-3F4EFDCC13C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*","matchCriteriaId":"803BC414-B250-4E3A-A478-A3881340D6B8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7FFF7106-ED78-49BA-9EC5-B889E3685D53"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*","matchCriteriaId":"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0FEB3337-BFDE-462A-908B-176F92053CEC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*","matchCriteriaId":"736AEAE9-782B-4F71-9893-DED53367E102"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56409CEC-5A1E-4450-AA42-641E459CC2AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*","matchCriteriaId":"B06F4839-D16A-4A61-9BB5-55B13F41E47F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.1.1","matchCriteriaId":"B0F46497-4AB0-49A7-9453-CC26837BF253"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.2.12","matchCriteriaId":"5722E753-75DE-4944-A11B-556CB299B57D"},{"vulnerable":true,"criteria":"cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.0.6","matchCriteriaId":"DC0F9351-81A4-4FEA-B6B5-6E960A933D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC"}]}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source":"support@hackerone.com","tags":["Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf","source":"support@hackerone.com","tags":["Third Party Advisory"]},{"url":"https://curl.se/docs/CVE-2021-22901.html","source":"support@hackerone.com","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479","source":"support@hackerone.com","tags":["Patch","Third Party Advisory"]},{"url":"https://hackerone.com/reports/1180380","source":"support@hackerone.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210723-0001/","source":"support@hackerone.com","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210727-0007/","source":"support@hackerone.com","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"support@hackerone.com","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"support@hackerone.com","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","source":"support@hackerone.com","tags":["Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://curl.se/docs/CVE-2021-22901.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://hackerone.com/reports/1180380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210723-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210727-0007/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-389290.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-732250.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2021-3606","sourceIdentifier":"security@openvpn.net","published":"2021-07-02T13:15:07.983","lastModified":"2026-06-17T04:05:25.693","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenVPN before version 2.5.3 on Windows allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which allows the user to run arbitrary code with the same privilege level as the main OpenVPN process (openvpn.exe)."},{"lang":"es","value":"OpenVPN versiones anteriores a 2.5.3 en Windows permite a usuarios locales cargar bibliotecas arbitrarias de carga dinámica por medio de un archivo de configuración de OpenSSL si está presente, permitiendo a un usuario ejecutar código arbitrario con el mismo nivel de privilegio que el proceso principal de OpenVPN (openvpn.exe)"}],"affected":[{"source":"security@openvpn.net","affectedData":[{"vendor":"n/a","product":"OpenVPN-GUI","versions":[{"version":"2.5.2 and prior releases","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"security@openvpn.net","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.3","matchCriteriaId":"7F9800A3-9DDA-44B2-9090-6E56BAA2DD71"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://community.openvpn.net/openvpn/wiki/CVE-2021-3606","source":"security@openvpn.net","tags":["Vendor Advisory"]},{"url":"https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements","source":"security@openvpn.net","tags":["Vendor Advisory"]},{"url":"https://community.openvpn.net/openvpn/wiki/CVE-2021-3606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-3613","sourceIdentifier":"security@openvpn.net","published":"2021-07-02T13:15:08.037","lastModified":"2026-06-17T04:05:26.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which allows the user to run arbitrary code with the same privilege level as the main OpenVPN process (OpenVPNConnect.exe)."},{"lang":"es","value":"OpenVPN Connect versiones 3.2.0 hasta 3.3.0, permite a usuarios locales cargar bibliotecas dinámicas arbitrarias por medio de un archivo de configuración de OpenSSL si está presente, permitiendo a un usuario ejecutar código arbitrario con el mismo nivel de privilegio que el proceso principal de OpenVPN (OpenVPNConnect.exe)"}],"affected":[{"source":"security@openvpn.net","affectedData":[{"vendor":"n/a","product":"OpenVPN Connect","versions":[{"version":"3.2.0 up to 3.3.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"security@openvpn.net","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:connect:*:*:*:*:*:windows:*:*","versionStartIncluding":"3.2.0","versionEndIncluding":"3.3.0","matchCriteriaId":"28A1683D-7915-44EC-BBE5-78E10AFE9E8A"}]}]}],"references":[{"url":"https://openvpn.net/vpn-server-resources/openvpn-connect-for-windows-change-log/","source":"security@openvpn.net","tags":["Release Notes","Vendor Advisory"]},{"url":"https://openvpn.net/vpn-server-resources/openvpn-connect-for-windows-change-log/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2020-11634","sourceIdentifier":"cve@zscaler.com","published":"2021-07-15T20:15:09.243","lastModified":"2026-06-17T02:50:31.613","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adversary may be able to execute arbitrary code in the SYSTEM context."},{"lang":"es","value":"El Zscaler Client Connector para Windows anterior a versión 2.1.2.105, presentaba una vulnerabilidad de secuestro DLL causada debido a la configuración de OpenSSL. Un adversario local puede ser capaz de ejecutar código arbitrario en el contexto SYSTEM"}],"affected":[{"source":"cve@zscaler.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:windows:*:*","versionEndExcluding":"2.1.2.105","matchCriteriaId":"7382AEA8-E99F-4E18-BF02-23F826FFD683"}]}]}],"references":[{"url":"https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2020?applicable_category=Windows&applicable_version=2.1.2.105","source":"cve@zscaler.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2020?applicable_category=Windows&applicable_version=2.1.2.105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-25698","sourceIdentifier":"security@teradici.com","published":"2021-07-21T15:15:15.887","lastModified":"2026-06-17T03:42:22.203","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attacker to elevate to the privileges of the running process via placing a specially crafted dll in a build configuration directory."},{"lang":"es","value":"El componente OpenSSL del Agente Teradici PCoIP Standard versiones anteriores a 21.07.0, era compilado sin la opción no-autoload-config, que permitía a un atacante elevarse a los privilegios del proceso en ejecución por medio de la colocación de una dll especialmente diseñada en un directorio de configuración de construcción"}],"affected":[{"source":"security@teradici.com","affectedData":[{"vendor":"n/a","product":"- PCoIP Standard Agent - PCoIP Graphics Agent - PCoIP Software Client","versions":[{"version":"21.07.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"security@teradici.com","type":"Secondary","description":[{"lang":"en","value":"CWE-426"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-426"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teradici:pcoip_standard_agent:*:*:*:*:*:windows:*:*","versionEndExcluding":"21.07.0","matchCriteriaId":"51500CA4-4434-4A24-861C-7FEBECFF95F8"}]}]}],"references":[{"url":"https://advisory.teradici.com/security-advisories/102/","source":"security@teradici.com","tags":["Vendor Advisory"]},{"url":"https://advisory.teradici.com/security-advisories/102/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-25699","sourceIdentifier":"security@teradici.com","published":"2021-07-21T15:15:15.947","lastModified":"2026-06-17T03:42:22.307","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL component of the Teradici PCoIP Software Client prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attacker to elevate to the privileges of the running process via placing a specially crafted dll in a build configuration directory."},{"lang":"es","value":"El componente OpenSSL del Teradici PCoIP Software Client versiones anteriores a 21.07.0, era compilado sin la opción no-autoload-config, que permitía a un atacante elevarse a los privilegios del proceso en ejecución por medio de la colocación de una dll especialmente diseñada en un directorio de configuración de construcción"}],"affected":[{"source":"security@teradici.com","affectedData":[{"vendor":"n/a","product":"- PCoIP Standard Agent - PCoIP Graphics Agent - PCoIP Software Client","versions":[{"version":"21.07.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"security@teradici.com","type":"Secondary","description":[{"lang":"en","value":"CWE-426"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-426"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teradici:pcoip_client:*:*:*:*:*:*:*:*","versionEndExcluding":"21.07.0","matchCriteriaId":"03302EEF-4866-4937-80E4-641AC2B3F212"}]}]}],"references":[{"url":"https://advisory.teradici.com/security-advisories/102/","source":"security@teradici.com","tags":["Vendor Advisory"]},{"url":"https://advisory.teradici.com/security-advisories/102/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-3711","sourceIdentifier":"openssl-security@openssl.org","published":"2021-08-24T15:15:09.133","lastModified":"2026-10-08T21:17:40.947","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the \"out\" parameter can be NULL and, on exit, the \"outlen\" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the \"out\" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k)."},{"lang":"es","value":"Para descifrar los datos cifrados de SM2 se espera que una aplicación llame a la función de la API EVP_PKEY_decrypt(). Normalmente, una aplicación llamará a esta función dos veces. La primera vez, al entrar, el parámetro \"out\" puede ser NULL y, al salir, el parámetro \"outlen\" se rellena con el tamaño del búfer necesario para contener el texto plano descifrado. La aplicación puede entonces asignar un búfer de tamaño suficiente y llamar de nuevo a EVP_PKEY_decrypt(), pero esta vez pasando un valor no NULL para el parámetro \"out\". Un bug en la implementación del código de descifrado SM2 significa que el cálculo del tamaño del búfer necesario para mantener el texto plano devuelto por la primera llamada a EVP_PKEY_decrypt() puede ser menor que el tamaño real requerido por la segunda llamada. Esto puede conllevar a un desbordamiento del búfer cuando la aplicación llama a EVP_PKEY_decrypt() por segunda vez con un búfer demasiado pequeño. Un atacante malicioso que sea capaz de presentar el contenido de SM2 para su descifrado a una aplicación podría causar que los datos elegidos por el atacante desborden el búfer hasta un máximo de 62 bytes alterando el contenido de otros datos mantenidos después del búfer, posiblemente cambiando el comportamiento de la aplicación o causando el bloqueo de la misma. La ubicación del búfer depende de la aplicación, pero normalmente se asigna a la pila. Corregido en OpenSSL versión 1.1.1l (Afectada 1.1.1-1.1.1k)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-08T20:59:50.338167Z","id":"CVE-2021-3711","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1l","matchCriteriaId":"A9592A08-7FF0-490F-B684-6EA8E49F36C7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6FEEC2-9F11-4643-8827-749718254FED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*","matchCriteriaId":"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*","matchCriteriaId":"B55E8D50-99B4-47EC-86F9-699B67D473CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*","matchCriteriaId":"1FE996B1-6951-4F85-AA58-B99A379D2163"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"62347994-1353-497C-9C4A-D5D8D95F67E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0","versionEndIncluding":"11.50.2","matchCriteriaId":"433D435D-13D0-4EAA-ACD9-DD88DA712D00"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*","matchCriteriaId":"A3C19813-E823-456A-B1CE-EC0684CE1953"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:manageability_software_development_kit:-:*:*:*:*:*:*:*","matchCriteriaId":"D39DCAE7-494F-40B2-867F-6C6A077939DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*","matchCriteriaId":"F1BE6C1F-2565-4E97-92AA-16563E5660A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*","matchCriteriaId":"5735E553-9731-4AAC-BCFF-989377F817B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"361B791A-D336-4431-8F68-8135BEFFAEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","matchCriteriaId":"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*","matchCriteriaId":"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:storage_encryption:-:*:*:*:*:*:*:*","matchCriteriaId":"2D82795C-F1ED-4D2C-B578-75B9EECBB99C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"BD4349FE-EEF8-489A-8ABF-5FCD55EC6DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.15.0:*:*:*:*:*:*:*","matchCriteriaId":"C6EAA723-2A23-4151-930B-86ACF9CC1C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_border_controller:8.4:*:*:*:*:*:*:*","matchCriteriaId":"9C416FD3-2E2F-4BBC-BD5F-F896825883F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_border_controller:9.0:*:*:*:*:*:*:*","matchCriteriaId":"D886339E-EDB2-4879-BD54-1800E4CA9CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_unified_session_manager:8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FB468FEE-A0F4-49A0-BBEE-10D0733C87D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_unified_session_manager:8.4.5:*:*:*:*:*:*:*","matchCriteriaId":"CC5C177E-0C77-48C9-847A-A9E5AA7DBC1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"348EEE70-E114-4720-AAAF-E77DE5C9A2D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_communications_broker:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3DCDD73B-57B1-4580-B922-5662E3AC13B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:*","matchCriteriaId":"7015A8CB-8FA6-423E-8307-BD903244F517"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_session_border_controller:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F9A4E206-56C7-4578-AC9C-088B0C8D9CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:essbase:*:*:*:*:*:*:*:*","versionEndExcluding":"11.1.2.4.47","matchCriteriaId":"C78A7E07-AB08-46C5-942D-B40BBE0C0D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:essbase:*:*:*:*:*:*:*:*","versionStartIncluding":"21.1","versionEndExcluding":"21.3","matchCriteriaId":"F2A9C248-94B0-4F7B-AD9C-4BE55AA1E3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:health_sciences_inform_publisher:6.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2F12453B-0E7B-46B9-ADEC-0AC5EDC41058"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:health_sciences_inform_publisher:6.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5D105A5B-0AA8-4782-B804-CB1384F85884"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.6.3","matchCriteriaId":"BE34D4F7-5C18-4578-8D0A-722FDF931333"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*","matchCriteriaId":"0B1CAD50-749F-4ADB-A046-BF3585677A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.27","matchCriteriaId":"AE23C7E1-F849-411D-850F-A504D4BA3414"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.25","matchCriteriaId":"88627B99-16DC-4878-A63A-A40F6FC1F477"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.35","matchCriteriaId":"E667933A-37EA-4BC2-9180-C3B4B7038866"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.26","matchCriteriaId":"709E83B4-8C66-4255-870B-2F72B37BA8C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","matchCriteriaId":"7E1E416B-920B-49A0-9523-382898C2979D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*","matchCriteriaId":"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*","matchCriteriaId":"C8AF00C6-B97F-414D-A8DF-057E6BFD8597"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D3E503FB-6279-4D4A-91D8-E237ECF9D2B0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"5.13.1","matchCriteriaId":"5FD1ED11-84AA-47E6-AD00-E08D035AF53B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16.0","versionEndIncluding":"5.19.1","matchCriteriaId":"8D977244-DC29-4301-8D89-0BD01BC328B8"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2021/08/26/2","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46","source":"openssl-security@openssl.org"},{"url":"https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E","source":"openssl-security@openssl.org"},{"url":"https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/202209-02","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202210-02","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210827-0010/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20211022-0003/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2021/dsa-4963","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20210824.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-16","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2022-02","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/08/26/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202209-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202210-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210827-0010/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20211022-0003/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2021/dsa-4963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20210824.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2022-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-3712","sourceIdentifier":"openssl-security@openssl.org","published":"2021-08-24T15:15:09.533","lastModified":"2026-06-17T04:05:36.623","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y)."},{"lang":"es","value":"Las cadenas ASN.1 se representan internamente en OpenSSL como una estructura ASN1_STRING que contiene un búfer que contiene los datos de la cadena y un campo que contiene la longitud del búfer. Esto contrasta con las cadenas C normales, que se representan como un búfer para los datos de la cadena que termina con un byte NUL (0). Aunque no es un requisito estricto, las cadenas ASN.1 que se analizan usando las propias funciones \"d2i\" de OpenSSL (y otras funciones de análisis similares), así como cualquier cadena cuyo valor ha sido ajustado con la función ASN1_STRING_set(), terminarán adicionalmente con NUL la matriz de bytes en la estructura ASN1_STRING. Sin embargo, es posible que las aplicaciones construyan directamente estructuras ASN1_STRING válidas que no terminen en NUL la matriz de bytes, ajustando directamente los campos \"data\" y \"length\" en la matriz ASN1_STRING. Esto también puede ocurrir usando la función ASN1_STRING_set0(). Se ha detectado que numerosas funciones de OpenSSL que imprimen datos ASN.1 asumen que la matriz de bytes ASN1_STRING estará terminada en NUL, aunque esto no está garantizado para las cadenas que han sido construidas directamente. Cuando una aplicación pide que se imprima una estructura ASN.1, y cuando esa estructura ASN.1 contiene ASN1_STRINGs que han sido construidos directamente por la aplicación sin terminar en NUL el campo \"data\", entonces puede ocurrir un desbordamiento del buffer de lectura. Lo mismo puede ocurrir durante el procesamiento de las restricciones de nombre de los certificados (por ejemplo, si un certificado ha sido construido directamente por la aplicación en lugar de cargarlo por medio de las funciones de análisis de OpenSSL, y el certificado contiene estructuras ASN1_STRING sin terminación NUL). También puede ocurrir en las funciones X509_get1_email(), X509_REQ_get1_email() y X509_get1_ocsp(). Si un actor malicioso puede hacer que una aplicación construya directamente un ASN1_STRING y luego lo procese a mediante una de las funciones de OpenSSL afectadas, este problema podría ser alcanzado. Esto podría resultar en un bloqueo (causando un ataque de Denegación de Servicio). También podría resultar en la revelación de contenidos de memoria privada (como claves privadas, o texto plano confidencial). Corregido en OpenSSL versión 1.1.1l (Afectada 1.1.1-1.1.1k). Corregido en OpenSSL versión 1.0.2za (Afectada 1.0.2-1.0.2y)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y)","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"BFCClient","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.17","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Industrial Edge - Machine Insight App","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Industrial Edge - PROFINET IO Connector","defaultStatus":"unknown","versions":[{"version":"All versions < V1.1.1","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM RM1224 LTE(4G) EU","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM RM1224 LTE(4G) NAM","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX MX5000","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX MX5000RE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1400","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1500","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1501","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1510","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1511","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1512","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1524","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1536","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX5000","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M804PB","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M812-1 ADSL-Router","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M812-1 ADSL-Router","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M816-1 ADSL-Router","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M816-1 ADSL-Router","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M826-2 SHDSL-Router","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M874-2","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M874-3","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-3","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-3 (ROK)","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-4 (EU)","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-4 (NAM)","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM853-1 (EU)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (EU)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (RoW)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE S615 LAN-Router","defaultStatus":"unknown","versions":[{"version":"All versions < V7.1","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE SC622-2C","defaultStatus":"unknown","versions":[{"version":"All versions < V2.3","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE SC632-2C","defaultStatus":"unknown","versions":[{"version":"All versions < V2.3","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE SC636-2C","defaultStatus":"unknown","versions":[{"version":"All versions < V2.3","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE SC642-2C","defaultStatus":"unknown","versions":[{"version":"All versions < V2.3","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE SC646-2C","defaultStatus":"unknown","versions":[{"version":"All versions < V2.3","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1748-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1748-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1788-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1788-2 EEC M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1788-2 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1788-2IA M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W721-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W721-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W721-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W721-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W722-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W722-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W722-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W722-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W722-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W722-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45 (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45 (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W738-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W738-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W738-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W738-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W761-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W761-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W761-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W761-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45 (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45 (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12 EEC (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12 EEC (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 SFP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 SFP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 SFP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 SFP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2IA RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2IA RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2IA RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2IA RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM766-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.2.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM766-1 (US)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.2.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM766-1 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.2.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM766-1 EEC (US)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.2.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUM766-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.2.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUM766-1 (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.2.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X200-4P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X201-3P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X201-3P IRT PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X202-2IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X202-2P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X202-2P IRT PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2FM","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2LD","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2LD TS","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2TS","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204IRT PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X206-1","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X206-1LD","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X208","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X208PRO","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X212-2","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X212-2LD","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X216","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X224","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (230V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (24V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (2x 230V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (2x 230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (2x 24V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (2x 24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X304-2FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X306-1LD FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (230V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (24V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (2x 230V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (2x 230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (2x 24V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (2x 24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-3LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-3LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LH","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LH","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LH+","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LH+","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M PoE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M PoE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M TS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M TS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X310","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X310","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X310FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X310FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X320-1 FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X320-1-2LD FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X408-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF201-3P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF202-2P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF204","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF204-2","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF204-2BA IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF204IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF206-1","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF208","defaultStatus":"unknown","versions":[{"version":"All versions < V5.2.6","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (230V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (230V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (230V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (230V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M TS (24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M TS (24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (230V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (230V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE TS (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1242-7 V2","defaultStatus":"unknown","versions":[{"version":"All versions < V3.3.46","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1243-1","defaultStatus":"unknown","versions":[{"version":"All versions < V3.3.46","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1243-7 LTE EU","defaultStatus":"unknown","versions":[{"version":"All versions < V3.3.46","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1243-7 LTE US","defaultStatus":"unknown","versions":[{"version":"All versions < V3.3.46","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1243-8 IRC","defaultStatus":"unknown","versions":[{"version":"All versions < V3.3.46","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1542SP-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.2.28","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1543-1","defaultStatus":"unknown","versions":[{"version":"All versions < V3.0.22","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1543SP-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.2.28","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1545-1","defaultStatus":"unknown","versions":[{"version":"All versions < V1.1","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC PCS neo (Administration Console)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC Process Historian OPC UA Server","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2020 SP1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1211C AC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1211C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1211C DC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212C AC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212C DC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212FC DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212FC DC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214C AC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214C DC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214FC DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214FC DC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215C AC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215C DC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215FC DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215FC DC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1217C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEC NMS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.0 SP3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEMA Remote Connect Server","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEMA Server V14","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINUMERIK Operate","defaultStatus":"unknown","versions":[{"version":"All versions <  V4.95 SP1","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CP 1543SP-1 ISEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.2.28","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.2.28","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS NET CP 1242-7 V2","defaultStatus":"unknown","versions":[{"version":"All versions < V3.3.46","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS NET CP 1543-1","defaultStatus":"unknown","versions":[{"version":"All versions < V3.0.22","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS NET SCALANCE X308-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CP 1243-1","defaultStatus":"unknown","versions":[{"version":"All versions < V3.3.46","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CP 1243-1 RAIL","defaultStatus":"unknown","versions":[{"version":"All versions < V3.3.46","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212 AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212 DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212 DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212C AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214 AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214 DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214FC DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214FC DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215C AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215FC DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"TIA Administrator","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.0.7","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.2},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-16T14:11:09.557845Z","id":"CVE-2021-3712","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2za","matchCriteriaId":"20353A2F-46B5-4C46-B562-42CD6E2B248B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1l","matchCriteriaId":"A9592A08-7FF0-490F-B684-6EA8E49F36C7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6FEEC2-9F11-4643-8827-749718254FED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*","matchCriteriaId":"1FE996B1-6951-4F85-AA58-B99A379D2163"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"62347994-1353-497C-9C4A-D5D8D95F67E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0","versionEndIncluding":"11.50.2","matchCriteriaId":"433D435D-13D0-4EAA-ACD9-DD88DA712D00"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*","matchCriteriaId":"A3C19813-E823-456A-B1CE-EC0684CE1953"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:manageability_software_development_kit:-:*:*:*:*:*:*:*","matchCriteriaId":"D39DCAE7-494F-40B2-867F-6C6A077939DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"361B791A-D336-4431-8F68-8135BEFFAEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*","matchCriteriaId":"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:storage_encryption:-:*:*:*:*:*:*:*","matchCriteriaId":"2D82795C-F1ED-4D2C-B578-75B9EECBB99C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*","versionEndExcluding":"5.10.0","matchCriteriaId":"A30F7908-5AF6-4761-BC6A-4C18EFAE48E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*","matchCriteriaId":"0F30D3AF-4FA3-4B7A-BE04-C24E2EA19A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*","matchCriteriaId":"7B00DDE7-7002-45BE-8EDE-65D964922CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_10:*:*:*:*:*:*","matchCriteriaId":"DB88C165-BB24-49FB-AAF6-087A766D5AD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*","matchCriteriaId":"FF806B52-DAD5-4D12-8BB6-3CBF9DC6B8DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*","matchCriteriaId":"7DE847E0-431D-497D-9C57-C4E59749F6A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*","matchCriteriaId":"46385384-5561-40AA-9FDE-A2DE4FDFAD3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*","matchCriteriaId":"B7CA7CA6-7CF2-48F6-81B5-69BA0A37EF4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*","matchCriteriaId":"9E4E5481-1070-4E1F-8679-1985DE4E785A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_7:*:*:*:*:*:*","matchCriteriaId":"D9EEA681-67FF-43B3-8610-0FA17FD279E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_8:*:*:*:*:*:*","matchCriteriaId":"C33BA8EA-793D-4E79-BE9C-235ACE717216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_9:*:*:*:*:*:*","matchCriteriaId":"823DBE80-CB8D-4981-AE7C-28F3FDD40451"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus_network_monitor:*:*:*:*:*:*:*:*","versionEndExcluding":"6.0.0","matchCriteriaId":"9E0DE4DE-9454-4E8D-9E00-3CBCDD8C142A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16.0","versionEndIncluding":"5.19.1","matchCriteriaId":"8D977244-DC29-4301-8D89-0BD01BC328B8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:essbase:*:*:*:*:*:*:*:*","versionEndExcluding":"11.1.2.4.047","matchCriteriaId":"6A0BD5BD-E2F8-4B4E-B5CF-9787E6F2E4AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:essbase:*:*:*:*:*:*:*:*","versionStartIncluding":"21.0","versionEndExcluding":"21.3","matchCriteriaId":"3197F464-F0A5-4BD4-9068-65CD448D8F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:essbase:21.3:*:*:*:*:*:*:*","matchCriteriaId":"15DD67FD-CE98-4556-A036-B2970935AF4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.27","matchCriteriaId":"AE23C7E1-F849-411D-850F-A504D4BA3414"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.25","matchCriteriaId":"88627B99-16DC-4878-A63A-A40F6FC1F477"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.0","versionEndIncluding":"5.7.35","matchCriteriaId":"E667933A-37EA-4BC2-9180-C3B4B7038866"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.26","matchCriteriaId":"709E83B4-8C66-4255-870B-2F72B37BA8C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.26","matchCriteriaId":"EED6C8C2-F986-4CFD-A343-AD2340F850F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","matchCriteriaId":"7E1E416B-920B-49A0-9523-382898C2979D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*","matchCriteriaId":"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*","matchCriteriaId":"C8AF00C6-B97F-414D-A8DF-057E6BFD8597"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:secure_backup:18.1.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E8929B61-16EC-4FE0-98A5-1CC7CC7FD9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D3E503FB-6279-4D4A-91D8-E237ECF9D2B0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.1.1","matchCriteriaId":"B0F46497-4AB0-49A7-9453-CC26837BF253"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"DAAB7154-4DE8-4806-86D0-C1D33B84417B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"BD4349FE-EEF8-489A-8ABF-5FCD55EC6DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.15.0:*:*:*:*:*:*:*","matchCriteriaId":"C6EAA723-2A23-4151-930B-86ACF9CC1C0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_border_controller:8.4:*:*:*:*:*:*:*","matchCriteriaId":"9C416FD3-2E2F-4BBC-BD5F-F896825883F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_session_border_controller:9.0:*:*:*:*:*:*:*","matchCriteriaId":"D886339E-EDB2-4879-BD54-1800E4CA9CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_unified_session_manager:8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FB468FEE-A0F4-49A0-BBEE-10D0733C87D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:communications_unified_session_manager:8.4.5:*:*:*:*:*:*:*","matchCriteriaId":"CC5C177E-0C77-48C9-847A-A9E5AA7DBC1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"348EEE70-E114-4720-AAAF-E77DE5C9A2D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_communications_broker:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3DCDD73B-57B1-4580-B922-5662E3AC13B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:*","matchCriteriaId":"7015A8CB-8FA6-423E-8307-BD903244F517"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_session_border_controller:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F9A4E206-56C7-4578-AC9C-088B0C8D9CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:health_sciences_inform_publisher:6.2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0D1E6A38-4CBD-42E9-B2D2-11AEF157822F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:health_sciences_inform_publisher:6.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5D105A5B-0AA8-4782-B804-CB1384F85884"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*","versionEndExcluding":"9.2.6.3","matchCriteriaId":"BE34D4F7-5C18-4578-8D0A-722FDF931333"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*","matchCriteriaId":"0B1CAD50-749F-4ADB-A046-BF3585677A58"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2021/08/26/2","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12","source":"openssl-security@openssl.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10366","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E","source":"openssl-security@openssl.org"},{"url":"https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E","source":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202209-02","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202210-02","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210827-0010/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2021/dsa-4963","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20210824.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-16","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2022-02","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/08/26/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202209-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202210-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210827-0010/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2021/dsa-4963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20210824.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2021-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2022-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019200.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-028723.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-244969.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-389290.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2021-34581","sourceIdentifier":"info@cert.vde.com","published":"2021-08-31T11:15:07.830","lastModified":"2026-06-17T03:56:10.183","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device."},{"lang":"es","value":"Una vulnerabilidad de Falta de Liberación de Recursos después del Tiempo de Vida Efectivo en la implementación de OpenSSL de WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 en versiones FW4 hasta FW15, permite a un atacante no autenticado causar DoS en el dispositivo"}],"affected":[{"source":"info@cert.vde.com","affectedData":[{"vendor":"WAGO","product":"750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889","versions":[{"version":"FW4","lessThan":"All*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"info@cert.vde.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"info@cert.vde.com","type":"Secondary","description":[{"lang":"en","value":"CWE-772"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-772"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wago:750-880\\/040-000_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"fw4","versionEndIncluding":"fw15","matchCriteriaId":"64E837A4-57BE-40EB-8A56-B0BB206FE18F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wago:750-880\\/040-000:-:*:*:*:*:*:*:*","matchCriteriaId":"FC027AEF-12BD-45CF-969B-9336F57E104E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wago:750-880\\/025-002_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"fw4","versionEndIncluding":"fw15","matchCriteriaId":"919AC39F-D02D-49C0-90D6-F5230C61A7D6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wago:750-880\\/025-002:-:*:*:*:*:*:*:*","matchCriteriaId":"E1C30C82-1A6F-42F3-92CA-D1F0BD6DB628"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wago:750-880\\/025-001_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"fw4","versionEndIncluding":"fw15","matchCriteriaId":"79B295FB-FFCF-459B-9486-3727471654B1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wago:750-880\\/025-001:-:*:*:*:*:*:*:*","matchCriteriaId":"E5BF7980-8B31-45AF-869D-531801B98BFD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wago:750-880\\/025-000_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"fw4","versionEndIncluding":"fw15","matchCriteriaId":"00D72029-8484-452B-B1CD-D0524D531B10"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wago:750-880\\/025-000:-:*:*:*:*:*:*:*","matchCriteriaId":"B2F43C2B-AA5E-4C09-9459-05273061CCB0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wago:750-831\\/000-002_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"fw4","versionEndIncluding":"fw15","matchCriteriaId":"81AECA1A-207F-4286-B39C-E75F6E047AE8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wago:750-831\\/000-002:-:*:*:*:*:*:*:*","matchCriteriaId":"8CB5953A-51A5-4A60-A066-4280066B968B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"fw4","versionEndIncluding":"fw15","matchCriteriaId":"EEA48F1D-170A-48A4-B599-548209CA005E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:*","matchCriteriaId":"57919AAB-2962-4543-810A-C143300351F8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"fw4","versionEndIncluding":"fw15","matchCriteriaId":"66314186-5478-4DFD-B08D-6FC2B85A6986"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*","matchCriteriaId":"6FE51647-62C1-4D3C-91FA-13ACA6CD71D2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"fw4","versionEndIncluding":"fw15","matchCriteriaId":"2AE56B51-58E5-4C2F-9DD8-21DC72274C0E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:*","matchCriteriaId":"F0631884-FF6F-4AA9-9D76-CDECB5A738FC"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"fw4","versionEndIncluding":"fw15","matchCriteriaId":"FD8DD66C-05AA-4E92-9B0C-A2732DAB3A21"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:*","matchCriteriaId":"CFEAC4D9-15CF-44B8-844D-C012AA4637A2"}]}]}],"references":[{"url":"https://cert.vde.com/en-us/advisories/vde-2021-038","source":"info@cert.vde.com","tags":["Third Party Advisory"]},{"url":"https://cert.vde.com/en-us/advisories/vde-2021-038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2021-32592","sourceIdentifier":"psirt@fortinet.com","published":"2021-12-01T12:15:07.560","lastModified":"2026-06-17T03:53:14.053","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path."},{"lang":"es","value":"Una vulnerabilidad de ruta de búsqueda no segura en FortiClientWindows versiones 7.0.0, 6.4.6 y anteriores, 6.2.x, 6.0.x y FortiClientEMS 7.0.0, 6.4.6 y anteriores, 6.2.x, 6.0.x puede permitir a un atacante llevar a cabo un ataque de secuestro de DLL en los dispositivos afectados por medio de una biblioteca de motor OpenSSL maliciosa en la ruta de búsqueda"}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"Fortinet FortiClientWindows, FortiClientEMS","versions":[{"version":"FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x; FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-23T14:13:17.944651Z","id":"CVE-2021-32592","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.9","matchCriteriaId":"4BF4B4CA-81E0-42EA-9EA4-66A4414345C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"C5601CD7-A7CE-4FC5-A635-B20B415DC8C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.7","matchCriteriaId":"498A1406-3D4F-4935-82E3-7BE699136DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.0.0:*:*:*:*:windows:*:*","matchCriteriaId":"43B7F057-9D03-4687-8B04-FDE3A94C3EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.6","matchCriteriaId":"239E4215-D6D7-48D4-A3AF-5981C949A700"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2.0","versionEndIncluding":"6.2.9","matchCriteriaId":"9C331B17-F3B4-42C1-8050-F35414C5686C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.0","versionEndExcluding":"6.4.7","matchCriteriaId":"C7015BBF-7E52-410C-9158-BC08C4AD9CA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient_enterprise_management_server:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8C448C03-C45D-4348-BE21-352FFCA4DEFD"}]}]}],"references":[{"url":"https://fortiguard.com/advisory/FG-IR-21-088","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/advisory/FG-IR-21-088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-4044","sourceIdentifier":"openssl-security@openssl.org","published":"2021-12-14T19:15:07.807","lastModified":"2026-06-17T04:18:56.683","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server. That function may return a negative return value to indicate an internal error (for example out of memory). Such a negative return value is mishandled by OpenSSL and will cause an IO function (such as SSL_connect() or SSL_do_handshake()) to not indicate success and a subsequent call to SSL_get_error() to return the value SSL_ERROR_WANT_RETRY_VERIFY. This return value is only supposed to be returned by OpenSSL if the application has previously called SSL_CTX_set_cert_verify_callback(). Since most applications do not do this the SSL_ERROR_WANT_RETRY_VERIFY return value from SSL_get_error() will be totally unexpected and applications may not behave correctly as a result. The exact behaviour will depend on the application but it could result in crashes, infinite loops or other similar incorrect responses. This issue is made more serious in combination with a separate bug in OpenSSL 3.0 that will cause X509_verify_cert() to indicate an internal error when processing a certificate chain. This will occur where a certificate does not include the Subject Alternative Name extension but where a Certificate Authority has enforced name constraints. This issue can occur even with valid chains. By combining the two issues an attacker could induce incorrect, application dependent behaviour. Fixed in OpenSSL 3.0.1 (Affected 3.0.0)."},{"lang":"es","value":"Internamente libssl en OpenSSL llama a X509_verify_cert() en el lado del cliente para verificar un certificado suministrado por un servidor. Esta función puede devolver un valor negativo para indicar un error interno (por ejemplo, falta de memoria). Tal valor de retorno negativo es mal manejado por OpenSSL y causará que una función IO (como SSL_connect() o SSL_do_handshake()) no indique el éxito y una llamada posterior a SSL_get_error() devuelva el valor SSL_ERROR_WANT_RETRY_VERIFY. Este valor de retorno sólo debe ser devuelto por OpenSSL si la aplicación ha llamado previamente a SSL_CTX_set_cert_verify_callback(). Como la mayoría de las aplicaciones no hacen esto, el valor de retorno SSL_ERROR_WANT_RETRY_VERIFY de SSL_get_error() será totalmente inesperado y las aplicaciones pueden no comportarse correctamente como resultado. El comportamiento exacto dependerá de la aplicación, pero podría resultar en bloqueos, bucles infinitos u otras respuestas incorrectas similares. Este problema se agrava en combinación con otro fallo en OpenSSL versión 3.0 que hará que X509_verify_cert() indique un error interno cuando procesa una cadena de certificados. Esto ocurrirá cuando un certificado no incluya la extensión de nombre alternativo del sujeto pero cuando una autoridad de certificación haya aplicado restricciones de nombre. Este problema puede producirse incluso con cadenas válidas. Combinando los dos problemas, un atacante podría inducir un comportamiento incorrecto y dependiente de la aplicación. Corregido en OpenSSL versión 3.0.1 (Afectado 3.0.0)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 3.0.1 (Affected 3.0.0)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.2","matchCriteriaId":"D53A6288-46D2-452F-95DA-ADA3A55544E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"73104834-5810-48DD-9B97-549D223853F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5D1E839A-4780-412E-9F02-DD3029A0B8EF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*","matchCriteriaId":"5C2089EE-5D7F-47EC-8EA5-0F69790564C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*","matchCriteriaId":"24B8DB06-590A-4008-B0AB-FCD1401C77C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*","matchCriteriaId":"E7CF3019-975D-40BB-A8A4-894E62BD3797"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","matchCriteriaId":"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1236B66D-EB11-4324-929F-E2B86683C3C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*","matchCriteriaId":"281DFC67-46BB-4FC2-BE03-3C65C9311F65"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:500f_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"ECF32BB1-9A58-4821-AE49-5D5C8200631F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:500f:-:*:*:*:*:*:*:*","matchCriteriaId":"F21DE67F-CDFD-4D36-9967-633CD0240C6F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7FFF7106-ED78-49BA-9EC5-B889E3685D53"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*","matchCriteriaId":"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56409CEC-5A1E-4450-AA42-641E459CC2AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*","matchCriteriaId":"B06F4839-D16A-4A61-9BB5-55B13F41E47F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"108A2215-50FB-4074-94CF-C130FA14566D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*","matchCriteriaId":"7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"32F0B6C0-F930-480D-962B-3F4EFDCC13C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*","matchCriteriaId":"803BC414-B250-4E3A-A478-A3881340D6B8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0FEB3337-BFDE-462A-908B-176F92053CEC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*","matchCriteriaId":"736AEAE9-782B-4F71-9893-DED53367E102"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D0B4AD8A-F172-4558-AEC6-FF424BA2D912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*","matchCriteriaId":"8497A4C9-8474-4A62-8331-3FE862ED4098"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*","matchCriteriaId":"CDDF61B7-EC5C-467C-B710-B89F502CD04F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6770B6C3-732E-4E22-BF1C-2D2FD610061C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*","matchCriteriaId":"9F9C8C20-42EB-4AB5-BD97-212DEB070C43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"17.0.0","versionEndExcluding":"17.3.0","matchCriteriaId":"EF176509-5AA8-4644-84E5-051964AECCE5"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=758754966791c537ea95241438454aa86f91f256","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20211229-0003/","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.openssl.org/news/secadv/20211214.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=758754966791c537ea95241438454aa86f91f256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20211229-0003/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.openssl.org/news/secadv/20211214.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2021-44273","sourceIdentifier":"cve@mitre.org","published":"2021-12-23T12:15:07.387","lastModified":"2026-06-17T04:12:08.247","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"e2guardian v5.4.x <= v5.4.3r is affected by missing SSL certificate validation in the SSL MITM engine. In standalone mode (i.e., acting as a proxy or a transparent proxy), with SSL MITM enabled, e2guardian, if built with OpenSSL v1.1.x, did not validate hostnames in certificates of the web servers that it connected to, and thus was itself vulnerable to MITM attacks."},{"lang":"es","value":"e2guardian versiones v5.4.x versiones anteriores a v5.4.3r incluyéndola, está afectado por la falta de comprobación de certificados SSL en el motor SSL MITM. En modo autónomo (es decir, actuando como proxy o proxy transparente), con SSL MITM habilitado, e2guardian, si está construido con OpenSSL versión v1.1.x, no comprueba los nombres de host en los certificados de los servidores web a los que son conectados, y por lo tanto es vulnerable a los ataques de tipo MITM"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e2bn:e2guardian:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.3r","matchCriteriaId":"3215FB43-3E00-4B8F-B56A-15E689EB7464"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2021/12/23/2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://github.com/e2guardian/e2guardian/commit/eae46a7e2a57103aadca903c4a24cca94dc502a2","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/e2guardian/e2guardian/issues/707","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00010.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2021/12/23/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://github.com/e2guardian/e2guardian/commit/eae46a7e2a57103aadca903c4a24cca94dc502a2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/e2guardian/e2guardian/issues/707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2022-0166","sourceIdentifier":"trellixpsirt@trellix.com","published":"2022-01-19T11:15:07.923","lastModified":"2026-06-17T04:20:05.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5. McAfee Agent uses openssl.cnf during the build process to specify the OPENSSLDIR variable as a subdirectory within the installation directory. A low privilege user could have created subdirectories and executed arbitrary code with SYSTEM privileges by creating the appropriate pathway to the specifically created malicious openssl.cnf file."},{"lang":"es","value":"Una vulnerabilidad de escalada de privilegios en McAfee Agent versiones anteriores a 5.7.5. McAfee Agent usa el archivo openssl.cnf durante el proceso de construcción para especificar la variable OPENSSLDIR como un subdirectorio dentro del directorio de instalación. Un usuario con bajos privilegios podría haber creado subdirectorios y ejecutar código arbitrario con privilegios SYSTEM creando la ruta apropiada al archivo openssl.cnf malicioso creado específicamente"}],"affected":[{"source":"trellixpsirt@trellix.com","affectedData":[{"vendor":"McAfee,LLC","product":"McAfee Agent for Windows","platforms":["Windows"],"versions":[{"version":"unspecified","lessThan":"5.7.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"trellixpsirt@trellix.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:agent:*:*:*:*:*:windows:*:*","versionEndExcluding":"5.7.5","matchCriteriaId":"69FBFFA9-677B-4116-9307-407D5E027E65"}]}]}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10378","source":"trellixpsirt@trellix.com"},{"url":"https://www.kb.cert.org/vuls/id/287178","source":"trellixpsirt@trellix.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/287178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2021-4160","sourceIdentifier":"openssl-security@openssl.org","published":"2022-01-28T22:15:15.133","lastModified":"2026-06-17T04:19:08.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH private key among multiple clients, which is no longer an option since CVE-2016-0701. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0.0. It was addressed in the releases of 1.1.1m and 3.0.1 on the 15th of December 2021. For the 1.0.2 release it is addressed in git commit 6fc1aaaf3 that is available to premium support customers only. It will be made available in 1.0.2zc when it is released. The issue only affects OpenSSL on MIPS platforms. Fixed in OpenSSL 3.0.1 (Affected 3.0.0). Fixed in OpenSSL 1.1.1m (Affected 1.1.1-1.1.1l). Fixed in OpenSSL 1.0.2zc-dev (Affected 1.0.2-1.0.2zb)."},{"lang":"es","value":"Se presenta un bug de propagación carry en el procedimiento de cuadratura de MIPS32 y MIPS64. Muchos algoritmos de la CE están afectados, incluyendo algunas de las curvas por defecto de TLS versión 1.3. El impacto no es analizado en detalle, porque los requisitos previos para el ataque son considerados poco probables e incluyen el reuso de claves privadas. El análisis sugiere que los ataques contra RSA y DSA como resultado de este defecto serían muy difíciles de llevar a cabo y no se consideran probables. Los ataques contra DH se consideran apenas factibles (aunque muy difíciles) porque la mayor parte del trabajo necesario para deducir información sobre una clave privada puede llevarse a cabo fuera de línea. La cantidad de recursos necesarios para un ataque de este tipo sería significativa. Sin embargo, para que un ataque a TLS tenga sentido, el servidor tendría que compartir la clave privada DH entre múltiples clientes, lo que ya no es una opción desde CVE-2016-0701. Este problema afecta a OpenSSL versiones 1.0.2, 1.1.1 y 3.0.0. Se ha abordado en versiones 1.1.1m y 3.0.1 el 15 de diciembre de 2021. En el caso de la versión 1.0.2, ha sido  abordada en el commit 6fc1aaaf3 de git, que sólo está disponible para los clientes de soporte premium. Estará disponible en la versión 1.0.2zc cuando sea publicada. El problema sólo afecta a OpenSSL en plataformas MIPS. Corregido en OpenSSL versión 3.0.1 (Afectado  versión 3.0.0). Corregido en OpenSSL versión 1.1.1m (Afectado versión 1.1.1-1.1.1l). Corregido en OpenSSL versión 1.0.2zc-dev (Afectado versión 1.0.2-1.0.2zb)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 3.0.1 (Affected 3.0.0)","status":"affected"},{"version":"Fixed in OpenSSL 1.1.1m (Affected 1.1.1-1.1.1l)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2zc-dev (Affected 1.0.2-1.0.2zb)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-24T15:29:13.671400Z","id":"CVE-2021-4160","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndIncluding":"1.0.2zb","matchCriteriaId":"C0637240-BA4E-4B83-9E47-5418B2B8E76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1m","matchCriteriaId":"6314E930-4FD0-42E6-8953-75205248D0C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:-:*:*:*:*:*:*","matchCriteriaId":"07D64A21-359E-40B7-8636-7E76D7466263"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"548C088E-7123-4825-B752-4DEA6A421766"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha10:*:*:*:*:*:*","matchCriteriaId":"94E6E480-5E0C-4BDA-B904-38A8E025A38E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha11:*:*:*:*:*:*","matchCriteriaId":"68C330BD-0089-43E1-A5A7-89478D699FCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha12:*:*:*:*:*:*","matchCriteriaId":"EDDBB564-F8B3-4354-92DD-CBA482E01F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha13:*:*:*:*:*:*","matchCriteriaId":"FA41AD12-87F2-4F8F-9D92-BD141D1BB5CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha14:*:*:*:*:*:*","matchCriteriaId":"C7276F4F-2520-4477-9D52-7BEB6188A714"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha15:*:*:*:*:*:*","matchCriteriaId":"A0B98C2A-2B8B-406F-8881-455640624D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha16:*:*:*:*:*:*","matchCriteriaId":"408C7AFA-F4ED-4D36-91BD-E621D056F0F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha17:*:*:*:*:*:*","matchCriteriaId":"96457E9D-6EFC-4FB9-AAF5-A9A27B519BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"31593C1F-A2EA-4A47-8027-397C79EC9E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"C47AA30A-71D5-4AA4-9C0C-794B2705FE7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"7F4EAFB3-1345-4B67-8859-3EB1DFD23C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"D0F3FCF6-136F-4FF8-BB1D-B5D08E6C246C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"3438FAA2-AEBC-4A32-8E33-3035EE392CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha7:*:*:*:*:*:*","matchCriteriaId":"1AF93A67-34DE-44FC-9402-60048ADE8F1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha8:*:*:*:*:*:*","matchCriteriaId":"26ED655F-95C7-4A29-A0A1-F40C3150B36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:alpha9:*:*:*:*:*:*","matchCriteriaId":"8D6A2277-07F5-4D0F-BB36-268D0C449051"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"72F6B7A7-BCD5-42BE-A77A-B4A4CB3540B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"A6F74415-4AD7-47E0-8792-F971E655954F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6FEEC2-9F11-4643-8827-749718254FED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:health_sciences_inform_publisher:6.2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2F12453B-0E7B-46B9-ADEC-0AC5EDC41058"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:health_sciences_inform_publisher:6.3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5D105A5B-0AA8-4782-B804-CB1384F85884"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4A87D1B6-87DF-4BC6-9C3E-F3AA47E22C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*","matchCriteriaId":"0B1CAD50-749F-4ADB-A046-BF3585677A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*","matchCriteriaId":"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*","matchCriteriaId":"C8AF00C6-B97F-414D-A8DF-057E6BFD8597"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0","matchCriteriaId":"C89891C1-DFD7-4E1F-80A9-7485D86A15B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*","matchCriteriaId":"4664B195-AF14-4834-82B3-0B2C98020EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*","matchCriteriaId":"75BC588E-CDF0-404E-AD61-02093A1DF343"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B095CC03-7077-4A58-AB25-CC5380CDCE5A"}]}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3bf7b73ea7123045b8f972badc67ed6878e6c37f","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6fc1aaaf303185aa5e483e06bdfae16daa9193a7","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9e726506cd2a3fd9c0f12daf8cc1fe934c7dddb","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/202210-02","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2022/dsa-5103","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220128.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"openssl-security@openssl.org","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3bf7b73ea7123045b8f972badc67ed6878e6c37f","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6fc1aaaf303185aa5e483e06bdfae16daa9193a7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9e726506cd2a3fd9c0f12daf8cc1fe934c7dddb","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202210-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2022/dsa-5103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220128.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-21656","sourceIdentifier":"security-advisories@github.com","published":"2022-02-22T23:15:11.223","lastModified":"2026-06-17T04:26:41.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Envoy is an open source edge and service proxy, designed for cloud-native applications. The default_validator.cc implementation used to implement the default certificate validation routines has a \"type confusion\" bug when processing subjectAltNames. This processing allows, for example, an rfc822Name or uniformResourceIndicator to be authenticated as a domain name. This confusion allows for the bypassing of nameConstraints, as processed by the underlying OpenSSL/BoringSSL implementation, exposing the possibility of impersonation of arbitrary servers. As a result Envoy will trust upstream certificates that should not be trusted."},{"lang":"es","value":"Envoy es un proxy de borde y servicio de código abierto, diseñado para aplicaciones nativas de la nube. La implementación default_validator.cc usada para implementar las rutinas de comprobación de certificados por defecto presenta un error de \"confusión de tipo\" cuando procesa subjectAltNames. Este procesamiento permite, por ejemplo, que un rfc822Name o uniformResourceIndicator sea autenticado como un nombre de dominio. Esta confusión permite omitir nameConstraints, tal y como lo procesa la implementación subyacente de OpenSSL/BoringSSL, exponiendo la posibilidad de suplantación de servidores arbitrarios. Como resultado, Envoy confiará en certificados de origen que no deberían ser confiables"}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"envoyproxy","product":"envoy","versions":[{"version":"< 1.20.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T15:55:47.477332Z","id":"CVE-2022-21656","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-843"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","versionEndExcluding":"1.20.2","matchCriteriaId":"E93E9C64-FAEC-494D-82CA-2AD4381EFE52"}]}]}],"references":[{"url":"https://github.com/envoyproxy/envoy/commit/bb95af848c939cfe5b5ee33c5b1770558077e64e","source":"security-advisories@github.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-c9g7-xwcv-pjx2","source":"security-advisories@github.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/envoyproxy/envoy/commit/bb95af848c939cfe5b5ee33c5b1770558077e64e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/envoyproxy/envoy/security/advisories/GHSA-c9g7-xwcv-pjx2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-25218","sourceIdentifier":"vulnreport@tenable.com","published":"2022-03-10T17:47:02.133","lastModified":"2026-06-17T04:33:13.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup, allows an unauthenticated attacker on the local area network to achieve a significant degree of control over the \"plaintext\" to which an arbitrary blob of ciphertext will be decrypted by OpenSSL's RSA_public_decrypt() function. This weakness allows the attacker to manipulate the various iterations of the telnetd startup state machine and eventually obtain a root shell on the device, by means of an exchange of crafted UDP packets. In all versions but K2 22.5.9.163 and K3C 32.1.15.93 a successful attack also requires the exploitation of a null-byte interaction error (CVE-2022-25219)."},{"lang":"es","value":"El uso del algoritmo RSA sin OAEP, o cualquier otro esquema de relleno, en telnetd_startup, permite a un atacante no autenticado en la red de área local lograr un grado significativo de control sobre \"texto plano\" al que un blob arbitrario de texto cifrado será descifrado por la función RSA_public_decrypt() de OpenSSL. Esta debilidad permite al atacante manipular las diversas iteraciones de la máquina de estado de inicio de telnetd y eventualmente obtener un shell de root en el dispositivo, mediante un intercambio de paquetes UDP diseñados. En todas las versiones excepto K2 22.5.9.163 y K3C 32.1.15.93 un ataque con éxito también requiere la explotación de un error de interacción de byte nulo (CVE-2022-25219)"}],"affected":[{"source":"vulnreport@tenable.com","affectedData":[{"vendor":"n/a","product":"Phicomm Routers","versions":[{"version":"K2 >= 22.5.9.163, K3 >= 21.5.37.246, K3C >= 32.1.15.93, K2P >= 20.4.1.7, K2 A7 >= 22.6.506.28","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:phicomm:k2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"22.5.9.163","matchCriteriaId":"66980EB4-9FEC-451F-93F1-3E275CD6A462"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:phicomm:k2:-:*:*:*:*:*:*:*","matchCriteriaId":"26A205A0-3616-4CD9-A7B8-FEA63742ABE9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:phicomm:k3_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"21.5.37.246","matchCriteriaId":"4C6D3940-9C77-4A8C-AD55-6857491B43B5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:phicomm:k3:-:*:*:*:*:*:*:*","matchCriteriaId":"7FFD131E-E41A-44BD-81B5-A1A10E64D88B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:phicomm:k3c_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"32.1.15.93","matchCriteriaId":"3319332E-25E6-4148-9A57-15FCF51C0413"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:phicomm:k3c:-:*:*:*:*:*:*:*","matchCriteriaId":"4D47C172-F2F6-451F-8891-D150DBBA181C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:phicomm:k2g_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"22.6.3.20","matchCriteriaId":"D4737564-B92D-408E-81EC-598B76EE347F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:phicomm:k2g:-:*:*:*:*:*:*:*","matchCriteriaId":"1C8AE809-CB81-4CEB-B383-0461E3885892"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:phicomm:k2p_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"20.4.1.7","matchCriteriaId":"8CE04942-4274-4A96-95E4-4838AAAC09A2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:phicomm:k2p:-:*:*:*:*:*:*:*","matchCriteriaId":"F80A65CA-B4F2-4912-B991-1D60869D5CB9"}]}]}],"references":[{"url":"https://www.tenable.com/security/research/tra-2022-01","source":"vulnreport@tenable.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2022-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-25219","sourceIdentifier":"vulnreport@tenable.com","published":"2022-03-10T17:47:02.457","lastModified":"2026-06-17T04:33:13.620","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A null byte interaction error has been discovered in the code that the telnetd_startup daemon uses to construct a pair of ephemeral passwords that allow a user to spawn a telnet service on the router, and to ensure that the telnet service persists upon reboot. By means of a crafted exchange of UDP packets, an unauthenticated attacker on the local network can leverage this null byte interaction error in such a way as to make those ephemeral passwords predictable (with 1-in-94 odds). Since the attacker must manipulate data processed by the OpenSSL function RSA_public_decrypt(), successful exploitation of this vulnerability depends on the use of an unpadded RSA cipher (CVE-2022-25218)."},{"lang":"es","value":"Se ha detectado un error de interacción de bytes nulos en el código que el demonio telnetd_startup usa para construir un par de contraseñas efímeras que permiten a un usuario generar un servicio de telnet en el router, y para asegurar que el servicio de telnet persiste tras el reinicio. Por medio de un intercambio diseñado de paquetes UDP, un atacante no autenticado en la red local puede aprovechar este error de interacción de bytes nulos de tal manera que haga que esas contraseñas efímeras sean predecibles (con una probabilidad de 1 en 94). Dado que el atacante debe manipular los datos procesados por la función RSA_public_decrypt() de OpenSSL, una explotación con éxito de esta vulnerabilidad depende del uso de un cifrado RSA sin relleno (CVE-2022-25218)"}],"affected":[{"source":"vulnreport@tenable.com","affectedData":[{"vendor":"n/a","product":"Phicomm Routers","versions":[{"version":"K3 >= 21.5.37.246, K3C >= 32.1.22.113, K2P >= 20.4.1.7, K2 A7 >= 22.6.506.28, K2G A1 >= 22.6.3.20","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","baseScore":6.9,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:phicomm:k2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"22.5.9.163","matchCriteriaId":"66980EB4-9FEC-451F-93F1-3E275CD6A462"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:phicomm:k2:-:*:*:*:*:*:*:*","matchCriteriaId":"26A205A0-3616-4CD9-A7B8-FEA63742ABE9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:phicomm:k3_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"21.5.37.246","matchCriteriaId":"4C6D3940-9C77-4A8C-AD55-6857491B43B5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:phicomm:k3:-:*:*:*:*:*:*:*","matchCriteriaId":"7FFD131E-E41A-44BD-81B5-A1A10E64D88B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:phicomm:k3c_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"32.1.15.93","matchCriteriaId":"3319332E-25E6-4148-9A57-15FCF51C0413"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:phicomm:k3c:-:*:*:*:*:*:*:*","matchCriteriaId":"4D47C172-F2F6-451F-8891-D150DBBA181C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:phicomm:k2g_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"22.6.3.20","matchCriteriaId":"D4737564-B92D-408E-81EC-598B76EE347F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:phicomm:k2g:-:*:*:*:*:*:*:*","matchCriteriaId":"1C8AE809-CB81-4CEB-B383-0461E3885892"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:phicomm:k2p_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"20.4.1.7","matchCriteriaId":"8CE04942-4274-4A96-95E4-4838AAAC09A2"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:phicomm:k2p:-:*:*:*:*:*:*:*","matchCriteriaId":"F80A65CA-B4F2-4912-B991-1D60869D5CB9"}]}]}],"references":[{"url":"https://www.tenable.com/security/research/tra-2022-01","source":"vulnreport@tenable.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2022-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-0778","sourceIdentifier":"openssl-security@openssl.org","published":"2022-03-15T17:15:08.513","lastModified":"2026-10-14T13:17:14.377","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc)."},{"lang":"es","value":"La función BN_mod_sqrt(), que calcula una raíz cuadrada modular, contiene un error que puede causar un bucle eterno para módulos no primos. Internamente, esta función es usado cuando son analizados certificados que contienen claves públicas de curva elíptica en forma comprimida o parámetros de curva elíptica explícitos con un punto base codificado en forma comprimida. Es posible desencadenar el bucle infinito si es diseñado un certificado con parámetros de curva explícitos no válidos. Dado que el análisis del certificado es realizado antes de la verificación de la firma del certificado, cualquier proceso que analice un certificado suministrado externamente puede ser objeto de un ataque de denegación de servicio. El bucle infinito también puede alcanzarse cuando son analizadas claves privadas diseñadas, ya que pueden contener parámetros explícitos de la curva elíptica. Por lo tanto, las situaciones vulnerables incluyen: - Clientes TLS que consumen certificados de servidor - Servidores TLS que consumen certificados de cliente - Proveedores de hosting que toman certificados o claves privadas de clientes - Autoridades de certificación que analizan peticiones de certificación de suscriptores - Cualquier otra cosa que analice parámetros de curva elíptica ASN.1 También cualquier otra aplicación que utilice BN_mod_sqrt() donde el atacante pueda controlar los valores de los parámetros es vulnerable a este problema de DoS. En OpenSSL versión 1.0.2, la clave pública no es analizada durante el análisis inicial del certificado, lo que dificulta ligeramente la activación del bucle infinito. Sin embargo, cualquier operación que requiera la clave pública del certificado desencadenará el bucle infinito. En particular, el atacante puede usar un certificado autofirmado para desencadenar el bucle durante la verificación de la firma del certificado. Este problema afecta a OpenSSL versiones 1.0.2, 1.1.1 y 3.0. Fue abordado en las versiones 1.1.1n y 3.0.2 del 15 de marzo de 2022. Corregido en OpenSSL versión 3.0.2 (Afectado 3.0.0,3.0.1). Corregido en OpenSSL versión 1.1.1n (Afectado 1.1.1-1.1.1m). Corregido en OpenSSL versión 1.0.2zd (Afectado 1.0.2-1.0.2zc)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1)","status":"affected"},{"version":"Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc)","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"BFCClient","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.17","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Industrial Edge - OPC UA Connector","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.7.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Industrial Edge - SIMATIC S7 Connector App","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.7.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"OpenPCS 7 V8.2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"OpenPCS 7 V9.0","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"OpenPCS 7 V9.1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM CROSSBOW Station Access Controller (SAC)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM RM1224 LTE(4G) EU","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM RM1224 LTE(4G) NAM","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX MX5000","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX MX5000RE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1400","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1500","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1501","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1510","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1511","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1512","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1524","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1536","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX5000","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE LPE9403","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0 HF0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M804PB","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M812-1 ADSL-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M812-1 ADSL-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M816-1 ADSL-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M816-1 ADSL-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M826-2 SHDSL-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M874-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M874-3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-3 (ROK)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-4","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-4 (EU)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-4 (NAM)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM853-1 (EU)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (EU)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (RoW)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE S615 EEC LAN-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE S615 LAN-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE SC622-2C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.3.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE SC632-2C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.3.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE SC636-2C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.3.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE SC642-2C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.3.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE SC646-2C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.3.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1748-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1748-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1750D (JP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.7.1.11","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1750D (ROW)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.7.1.11","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1750D (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.7.1.11","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1788-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1788-2 EEC M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1788-2 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1788-2IA M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W721-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W721-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W721-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W721-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W722-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W722-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W722-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W722-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W722-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W722-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45 (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W734-1 RJ45 (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W738-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W738-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W738-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W738-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W748-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W761-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W761-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W761-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W761-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45 (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W774-1 RJ45 (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12 EEC (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W778-1 M12 EEC (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 SFP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 SFP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 SFP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2 SFP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2IA RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2IA RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2IA RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W786-2IA RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-1 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 M12 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W788-2 RJ45","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM763-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM766-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM766-1 (US)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM766-1 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM766-1 EEC (US)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUM763-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUM763-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUM766-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUM766-1 (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X200-4P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X201-3P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X201-3P IRT PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X202-2IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X202-2IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X202-2P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X202-2P IRT PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2FM","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2LD TS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2TS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204IRT PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X206-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X206-1LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X208","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X208PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X212-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X212-2LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X216","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X224","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (230V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (24V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (2x 230V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (2x 230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (2x 24V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (2x 24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X304-2FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X306-1LD FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (230V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (24V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (2x 230V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (2x 230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (2x 24V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (2x 24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-3LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X307-3LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2 RD (inkl. SIPLUS variants)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LH","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LH","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LH+","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LH+","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M PoE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M PoE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M TS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M TS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X310","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X310","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X310FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X310FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X320-1 FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X320-1-2LD FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X408-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB205-3 (SC, PN)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB205-3 (ST, E/IP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB205-3 (ST, E/IP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB205-3 (ST, PN)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB205-3LD (SC, E/IP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB205-3LD (SC, PN)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB208 (E/IP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB208 (PN)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB213-3 (SC, E/IP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB213-3 (SC, PN)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB213-3 (ST, E/IP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB213-3 (ST, PN)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB213-3LD (SC, E/IP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB213-3LD (SC, PN)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB216 (E/IP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XB216 (PN)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC206-2 (SC)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC206-2 (ST/BFOC)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC206-2G PoE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC206-2G PoE (54 V DC)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC206-2G PoE EEC (54 V DC)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC206-2SFP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC206-2SFP EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC206-2SFP G","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC206-2SFP G (EIP DEF.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC206-2SFP G EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC208","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC208EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC208G","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC208G (EIP def.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC208G EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC208G PoE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC208G PoE (54 V DC)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC216","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC216-3G PoE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC216-3G PoE (54 V DC)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC216-4C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC216-4C G","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC216-4C G (EIP Def.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC216-4C G EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC216EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC224","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC224-4C G","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC224-4C G (EIP Def.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC224-4C G EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF201-3P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF202-2P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF204","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF204","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF204 DNA","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF204-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF204-2BA","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF204-2BA DNA","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF204-2BA IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF204IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF206-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF208","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XM408-4C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XM408-4C (L3 int.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XM408-8C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XM408-8C (L3 int.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XM416-4C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XM416-4C (L3 int.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XP208","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XP208 (Ethernet/IP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XP208EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XP208PoE EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XP216","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XP216 (Ethernet/IP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XP216EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XP216POE EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (230V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (230V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (230V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (230V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M TS (24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M TS (24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (230V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (230V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (230V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (230V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE TS (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE TS (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.1.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324WG (24 x FE, AC 230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324WG (24 X FE, DC 24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR326-2C PoE WG","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR326-2C PoE WG (without UL)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR328-4C WG (24XFE, 4XGE, 24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR328-4C WG (28xGE, AC 230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR328-4C WG (28xGE, DC 24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR524-8C, 1x230V","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR524-8C, 1x230V (L3 int.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR524-8C, 24V","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR524-8C, 24V (L3 int.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR524-8C, 2x230V","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR524-8C, 2x230V (L3 int.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR526-8C, 1x230V","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR526-8C, 1x230V (L3 int.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR526-8C, 24V","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR526-8C, 24V (L3 int.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR526-8C, 2x230V","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR526-8C, 2x230V (L3 int.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR528-6M","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR528-6M (2HR2, L3 int.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR528-6M (2HR2)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR528-6M (L3 int.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR552-12M","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR552-12M (2HR2, L3 int.)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR552-12M (2HR2)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR552-12M (2HR2)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V6.5.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Security Configuration Tool (SCT)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC Cloud Connect 7 CC712","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.9.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC Cloud Connect 7 CC716","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.9.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1242-7 V2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.4.29","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1243-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.4.29","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1243-7 LTE EU","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.4.29","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1243-7 LTE US","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.4.29","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1243-8 IRC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.4.29","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1542SP-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.2.28","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1543-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.37","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1543SP-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.2.28","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1545-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1.80","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1626","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 1628","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 343-1 Advanced","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 443-1 Advanced","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3.11","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CP 443-1 OPC UA","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC Drive Controller CPU 1504D TF","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC Drive Controller CPU 1507D TF","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200SP CPU 1510SP F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200SP CPU 1510SP F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200SP CPU 1510SP-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200SP CPU 1510SP-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200SP CPU 1512SP F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200SP CPU 1512SP F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200SP CPU 1512SP-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200SP CPU 1512SP-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V21.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC HMI Unified Comfort Panels family","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V18.0 Update 0 SR0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC Logon V1.6","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.6 Upd6","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV540 H","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV540 S","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV550 H","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV550 S","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV560 U","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV560 X","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC NET PC Software V14","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC NET PC Software V15","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC NET PC Software V16","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V16 Update 6","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC NET PC Software V17","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V17 SP1 Update 1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC PCS 7 TeleControl","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V9.1 Update 1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC PCS 7 V8.2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC PCS 7 V9.0","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC PCS 7 V9.1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V9.1 SP2 UC04","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC PCS neo (Administration Console)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC PDM","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V9.2 SP2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC Process Historian OPC UA Server","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2020 SP1 Update 1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RF166C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RF185C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RF186C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RF186CI","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RF188C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RF188CI","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RF360R","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.0.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RF610R","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RF615R","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RF650R","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RF680R","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RF685R","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0.1.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1211C AC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1211C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1211C DC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212C AC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212C DC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212FC DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1212FC DC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214C AC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214C DC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214FC DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1214FC DC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215C AC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215C DC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215FC DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1215FC DC/DC/Rly","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1200 CPU 1217C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1511-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1511-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1511-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1511C-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1511C-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1511F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1511F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1511F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1511T-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1511TF-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1512C-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1512C-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1513-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1513-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1513-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1513F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1513F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1513F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1513R-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1515-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1515-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1515-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1515F-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1515F-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1515F-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1515R-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1515T-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1515TF-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1516-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1516-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1516-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1516F-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1516F-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1516F-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1516T-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1516TF-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1517-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1517F-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1517H-3 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1517T-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1517TF-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518HF-4 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518T-4 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518TF-4 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODK","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODK","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 Software Controller V2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V21.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-PLCSIM Advanced","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC STEP 7 V15.1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC STEP 7 V16","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC STEP 7 V17","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V17 Update 5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC STEP 7 V5","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.7 HF4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC Unified (TIA Portal)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V17.0.0.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC V15.1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC V16","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC V17","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V17 Update 5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC V7.3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC V7.4","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.4 SP1 Update 22","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC V7.5","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.5 SP2 Update 16","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMOCODE ES V15.1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMOCODE ES V16","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMOCODE ES V17","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V17 Update 5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMOTION","defaultStatus":"unknown","versions":[{"version":"V5.1","lessThan":"V5.5.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMOTION SCOUT TIA V5.3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMOTION SCOUT TIA V5.4","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAMICS DCC V15.1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAMICS DCC V16","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAMICS Startdrive V15.1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAMICS Startdrive V16","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAMICS Startdrive V17","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAUT Software ST7sc","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAUT ST7CC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEC INS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.0 SP2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEC NMS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.0 SP3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEMA Remote Connect Server","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CP 1543SP-1 ISEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.2.28","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.2.28","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1510SP F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1510SP F-1 PN RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1510SP-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1510SP-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1510SP-1 PN RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1510SP-1 PN RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1512SP F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1512SP F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1512SP F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1512SP F-1 PN RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1512SP-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1512SP-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1512SP-1 PN RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS ET 200SP CPU 1512SP-1 PN RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS NET CP 1242-7 V2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.4.29","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS NET CP 1543-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.37","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS NET CP 343-1 Advanced","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS NET CP 443-1 Advanced","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3.11","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS NET SCALANCE X202-2P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.5.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS NET SCALANCE XC206-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS NET SCALANCE XC206-2SFP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS NET SCALANCE XC208","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS NET SCALANCE XC216-4C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CP 1243-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.4.29","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CP 1243-1 RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.4.29","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212 AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212 DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212 DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212C AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214 AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214 DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214C DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214FC DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1214FC DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215 DC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215C AC/DC/RLY","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215C DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1200 CPU 1215FC DC/DC/DC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.6.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1511-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1511-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1511-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1511-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1511-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1511-1 PN T1 RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1511-1 PN TX RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1511-1 PN TX RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1511F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1511F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1511F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1513-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1513-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1513-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1513-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1513-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1513F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1513F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1513F-1 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1515F-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1515F-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1515F-2 PN RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1515F-2 PN T2 RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1515R-2 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1515R-2 PN TX RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1516-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1516-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1516-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1516-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1516-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1516-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1516-3 PN/DP RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1516F-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1516F-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1516F-3 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1516F-3 PN/DP RAIL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.9.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1517H-3 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518F-4 PN/DP","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518HF-4 PN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS TIM 1531 IRC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.4.8","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIRIUS Safety ES V17 (TIA Portal)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V17 Update 5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIRIUS Soft Starter ES V15.1 (TIA Portal)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIRIUS Soft Starter ES V16 (TIA Portal)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIRIUS Soft Starter ES V17 (TIA Portal)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V17 Update 5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"TeleControl Server Basic V3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"TIA Administrator","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.0.8","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"TIA Portal Cloud V16","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"TIA Portal Cloud V17","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"TIM 1531 IRC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.4.8","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-22T13:27:14.476267Z","id":"CVE-2022-0778","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zd","matchCriteriaId":"F3BC593C-D7BB-42A8-9488-BE910A8C3B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.0","versionEndExcluding":"1.1.1n","matchCriteriaId":"16D7B14C-9D04-40AC-9FCE-73D3DF468DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.2","matchCriteriaId":"E7225F27-E0BC-4716-AF68-8D68EE90F7CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6FEEC2-9F11-4643-8827-749718254FED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:*","matchCriteriaId":"280AA828-6FA9-4260-8EC1-019423B966E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*","matchCriteriaId":"1FE996B1-6951-4F85-AA58-B99A379D2163"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"62347994-1353-497C-9C4A-D5D8D95F67E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"361B791A-D336-4431-8F68-8135BEFFAEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*","matchCriteriaId":"8ADFF451-740F-4DBA-BD23-3881945D3E40"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1236B66D-EB11-4324-929F-E2B86683C3C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*","matchCriteriaId":"281DFC67-46BB-4FC2-BE03-3C65C9311F65"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:500f_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"ECF32BB1-9A58-4821-AE49-5D5C8200631F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:500f:-:*:*:*:*:*:*:*","matchCriteriaId":"F21DE67F-CDFD-4D36-9967-633CD0240C6F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","matchCriteriaId":"A930E247-0B43-43CB-98FF-6CE7B8189835"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","matchCriteriaId":"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*","versionEndExcluding":"8.15.4","matchCriteriaId":"1188273E-D496-41A9-AE16-75C0EB70EFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.1.2","matchCriteriaId":"644DD241-261E-41A3-86B5-C0834502EA81"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0","versionEndExcluding":"10.2.42","matchCriteriaId":"49CFE4A3-DDFC-4801-8C68-510EB5CFBC36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.3.0","versionEndExcluding":"10.3.33","matchCriteriaId":"F8EB13E9-AFD7-4E82-A471-61201460CAC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.4.0","versionEndExcluding":"10.4.23","matchCriteriaId":"3EFE42EF-DB07-4DD4-A40C-6DD6A7D1E6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.5.0","versionEndExcluding":"10.5.14","matchCriteriaId":"E3C63CE6-6B86-4C48-8D30-DC74CA83C5EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndExcluding":"10.6.6","matchCriteriaId":"09ADA35C-125F-4970-ACB7-36A9CC3516BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"10.7.0","versionEndExcluding":"10.7.2","matchCriteriaId":"E0435104-B0F9-4997-A769-36821689DF45"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"12.0.0","versionEndIncluding":"12.12.0","matchCriteriaId":"564ED5C8-50D7-413A-B88E-E62B6C07336A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"12.13.0","versionEndExcluding":"12.22.11","matchCriteriaId":"274A9803-2997-4E65-BDB0-8B5C23120CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartExcluding":"14.0.0","versionEndIncluding":"14.14.0","matchCriteriaId":"05678B4E-5F27-4096-8E9B-38B84A7E7793"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"14.15.0","versionEndExcluding":"14.19.1","matchCriteriaId":"CECEE1EE-B2A2-476B-82AE-48DFF6F1729A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartExcluding":"16.0.0","versionEndIncluding":"16.12.0","matchCriteriaId":"DC9C8402-7102-4BCF-8A49-CFDF1C59B92F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"16.13.0","versionEndExcluding":"16.14.2","matchCriteriaId":"3DF34038-6987-4196-B5E7-FF5656D1EE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartExcluding":"17.0.0","versionEndExcluding":"17.7.2","matchCriteriaId":"0AD8D8BB-702C-4FDF-A0A2-872744B8BF68"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2022/May/33","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/May/35","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/May/38","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246","source":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/","source":"openssl-security@openssl.org"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202210-02","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220321-0002/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220429-0005/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"openssl-security@openssl.org"},{"url":"https://support.apple.com/kb/HT213255","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT213256","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT213257","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5103","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220315.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2022-06","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2022-07","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2022-08","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2022-09","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2022/May/33","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/May/35","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/May/38","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202210-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220321-0002/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220429-0005/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT213255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT213256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT213257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220315.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2022-06","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2022-07","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2022-08","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2022-09","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019200.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-028723.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-108696.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-712929.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2022-29505","sourceIdentifier":"dl_cve@linecorp.com","published":"2022-04-27T15:15:09.197","lastModified":"2026-06-17T04:40:19.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege escalation."},{"lang":"es","value":"Debido a una configuración errónea en la dependencia de openssl, LINE para Windows versiones anteriores sa 7.8. es vulnerable a una inyección de DLL que podría conllevar a una escalada de privilegios"}],"affected":[{"source":"dl_cve@linecorp.com","affectedData":[{"vendor":"LINE Corporation","product":"LINE for Windows","versions":[{"version":"<","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","baseScore":4.4,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linecorp:line:*:*:*:*:*:windows:*:*","versionEndExcluding":"7.8","matchCriteriaId":"7B0CDC0B-0224-4B8A-9047-BAB94823351F"}]}]}],"references":[{"url":"https://hackerone.com/reports/1423049","source":"dl_cve@linecorp.com","tags":["Permissions Required","Third Party Advisory"]},{"url":"https://hackerone.com/reports/1423049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-28198","sourceIdentifier":"psirt@nvidia.com","published":"2022-04-29T21:15:07.697","lastModified":"2026-06-17T04:38:08.800","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the system can cause arbitrary code execution which can impact confidentiality, integrity, and availability."},{"lang":"es","value":"NVIDIA Omniverse Nucleus y Cache contienen una vulnerabilidad en su configuración de OpenSSL, donde un atacante con acceso físico al sistema puede causar la ejecución de código arbitrario que puede impactar en la confidencialidad, integridad y disponibilidad"}],"affected":[{"source":"psirt@nvidia.com","affectedData":[{"vendor":"NVIDIA","product":"NVIDIA Omniverse Nucleus","versions":[{"version":"All versions prior to 2021.3.2","status":"affected"}]},{"vendor":"NVIDIA","product":"NVIDIA Omniverse Cache","versions":[{"version":"All versions prior to 2021.3.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@nvidia.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"psirt@nvidia.com","type":"Secondary","description":[{"lang":"en","value":"CWE-706"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:omniverse_cache:2021.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8B8C314B-7E3A-4A5D-BA8E-71C4AECA2C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:nvidia:omniverse_nucleus:2021.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4227D017-6C6C-4991-A7C7-78F17826C37B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5342","source":"psirt@nvidia.com","tags":["Vendor Advisory"]},{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-1292","sourceIdentifier":"openssl-security@openssl.org","published":"2022-05-03T16:15:18.823","lastModified":"2026-10-14T13:17:18.103","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd)."},{"lang":"es","value":"El script c_rehash no sanea apropiadamente los meta caracteres del shell para evitar la inyección de comandos. Este script es distribuido por algunos sistemas operativos de manera que es ejecutado automáticamente. En dichos sistemas operativos, un atacante podría ejecutar comandos arbitrarios con los privilegios del script. El uso del script c_rehash es considerado obsoleto y debe ser sustituido por la herramienta de línea de comandos OpenSSL rehash. Corregido en OpenSSL versión 3.0.3 (Afectado 3.0.0,3.0.1,3.0.2). Corregido en OpenSSL versión 1.1.1o (Afectado 1.1.1-1.1.1n). Corregido en OpenSSL versión 1.0.2ze (Afectado 1.0.2-1.0.2zd)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)","status":"affected"},{"version":"Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd)","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAMICS PERFECT HARMONY GH180","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-07-21T00:00:00+00:00","id":"CVE-2022-1292","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:brownfield_connectivity_gateway:*:*:*:*:*:*:*:*","versionEndExcluding":"2.15","matchCriteriaId":"16C63318-8522-466E-89CE-4092001DD925"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2ze","matchCriteriaId":"FD0C4F9C-8018-4EF7-A396-964549721AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1o","matchCriteriaId":"C220ACEB-E4F3-409B-A939-9F056987F770"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.3","matchCriteriaId":"204DDEF8-D6B2-4BD6-860C-B80A49FB225B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6FEEC2-9F11-4643-8827-749718254FED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*","matchCriteriaId":"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*","matchCriteriaId":"E8F29E19-3A64-4426-A2AA-F169440267CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*","matchCriteriaId":"B55E8D50-99B4-47EC-86F9-699B67D473CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*","matchCriteriaId":"1FE996B1-6951-4F85-AA58-B99A379D2163"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"62347994-1353-497C-9C4A-D5D8D95F67E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*","matchCriteriaId":"F1BE6C1F-2565-4E97-92AA-16563E5660A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*","matchCriteriaId":"5735E553-9731-4AAC-BCFF-989377F817B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"361B791A-D336-4431-8F68-8135BEFFAEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"4BB0FDCF-3750-44C6-AC5C-0CC2AAD14093"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","matchCriteriaId":"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:hyper-v:*:*","matchCriteriaId":"80774A35-B0B8-4F9C-99CA-23849978D158"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire\\,_enterprise_sds_\\&_hci_storage_node:-:*:*:*:*:*:*:*","matchCriteriaId":"DAA3919C-B2B1-4CB5-BA76-7A079AAFFC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*","matchCriteriaId":"D6D700C5-F67F-4FFB-BE69-D524592A3D2E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FDD92BFA-9117-4E6E-A13F-ED064B4B7284"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:a700s:-:*:*:*:*:*:*:*","matchCriteriaId":"4B7DA42F-5D64-4967-A2D4-6210FE507841"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6770B6C3-732E-4E22-BF1C-2D2FD610061C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*","matchCriteriaId":"9F9C8C20-42EB-4AB5-BD97-212DEB070C43"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7FFF7106-ED78-49BA-9EC5-B889E3685D53"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*","matchCriteriaId":"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56409CEC-5A1E-4450-AA42-641E459CC2AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*","matchCriteriaId":"B06F4839-D16A-4A61-9BB5-55B13F41E47F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"108A2215-50FB-4074-94CF-C130FA14566D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*","matchCriteriaId":"7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"32F0B6C0-F930-480D-962B-3F4EFDCC13C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*","matchCriteriaId":"803BC414-B250-4E3A-A478-A3881340D6B8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0FEB3337-BFDE-462A-908B-176F92053CEC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*","matchCriteriaId":"736AEAE9-782B-4F71-9893-DED53367E102"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D0B4AD8A-F172-4558-AEC6-FF424BA2D912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*","matchCriteriaId":"8497A4C9-8474-4A62-8331-3FE862ED4098"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_8300_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"CA79D39A-A5F2-4C44-A805-5113065F8C25"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_8300:-:*:*:*:*:*:*:*","matchCriteriaId":"4CA55FBD-6EBA-49C8-92BA-2B1BCCB18A3A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_8300_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D5CDADAB-72A5-4526-8432-E6C9AC56B29F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_8300:-:*:*:*:*:*:*:*","matchCriteriaId":"E64576DE-90F0-4F5E-9C82-AB745CFEDBB7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_8700_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"70ECC434-DF20-49A6-B4CF-D5CCA480E57D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_8700:-:*:*:*:*:*:*:*","matchCriteriaId":"232DC609-8023-41F9-8CE3-1B31CE2F2D93"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_8700_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"EF5AFE69-7990-4F80-9E63-D8AD58AA3A2D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_8700:-:*:*:*:*:*:*:*","matchCriteriaId":"6415E28A-4EAC-4F7F-BD81-1A55CE8B6F40"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_a400_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56FD9B9A-BBE5-4CA5-B9F9-B16E1FE738C8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_a400:-:*:*:*:*:*:*:*","matchCriteriaId":"F3E70A56-DBA8-45C7-8C49-1A036501156F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fabric-attached_storage_a400_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0BA5679F-B7F4-482B-92B3-52121124829F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fabric-attached_storage_a400:-:*:*:*:*:*:*:*","matchCriteriaId":"02F063AC-FC82-45E4-A977-243FB3569904"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1236B66D-EB11-4324-929F-E2B86683C3C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*","matchCriteriaId":"281DFC67-46BB-4FC2-BE03-3C65C9311F65"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"578BB9A7-BF28-4068-A9A6-1DE19CEEC293"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_500f:-:*:*:*:*:*:*:*","matchCriteriaId":"2AB58180-E5E0-4056-ABF9-A99E9F6A9E86"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_500f_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"86E430A7-F93D-422B-BC9E-99C17CC2BF6F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_500f:-:*:*:*:*:*:*:*","matchCriteriaId":"DBC58E3E-C8AA-4400-8A48-733B321CC924"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B095CC03-7077-4A58-AB25-CC5380CDCE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.7.38","matchCriteriaId":"8EB473B2-6C88-4FFF-9836-EE7A724461CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.29","matchCriteriaId":"40603932-7E9F-4D7F-8206-7D2819EE0586"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.29","matchCriteriaId":"76CA1C43-5BEC-4ABF-9E0A-E55D6C8311AB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*","matchCriteriaId":"80E516C0-98A4-4ADE-B69F-66A772E2BAAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","matchCriteriaId":"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"}]}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2","source":"openssl-security@openssl.org","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb","source":"openssl-security@openssl.org","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23","source":"openssl-security@openssl.org","tags":["Broken Link"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202210-02","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220602-0009/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220729-0004/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5139","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220503.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202210-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220602-0009/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220729-0004/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220503.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-146325.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-419740.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-942865.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-953464.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2022-1343","sourceIdentifier":"openssl-security@openssl.org","published":"2022-05-03T16:15:18.873","lastModified":"2026-10-14T13:17:18.587","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a successful verification) even in the case where the response signing certificate fails to verify. It is anticipated that most users of `OCSP_basic_verify` will not use the OCSP_NOCHECKS flag. In this case the `OCSP_basic_verify` function will return a negative value (indicating a fatal error) in the case of a certificate verification failure. The normal expected return value in this case would be 0. This issue also impacts the command line OpenSSL \"ocsp\" application. When verifying an ocsp response with the \"-no_cert_checks\" option the command line application will report that the verification is successful even though it has in fact failed. In this case the incorrect successful response will also be accompanied by error messages showing the failure and contradicting the apparently successful result. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)."},{"lang":"es","value":"La función \"OCSP_basic_verify\" verifica el certificado del firmante en una respuesta OCSP. En el caso de que sea usado el flag (no predeterminada) OCSP_NOCHECKS, la respuesta será positiva (lo que significa una verificación exitosa) incluso en el caso de que el certificado firmante de la respuesta no sea verificada. Es previsto que la mayoría de los usuarios de \"OCSP_basic_verify\" no usarán el indicador OCSP_NOCHECKS. En este caso, la función \"OCSP_basic_verify\" devolverá un valor negativo (indicando un error fatal) en caso de que falle la verificación del certificado. El valor de retorno normal esperado en este caso sería 0. Este problema también afecta a la aplicación de línea de comandos OpenSSL \"ocsp\". Cuando es verificada una respuesta ocsp con la opción \"-no_cert_checks\", la aplicación de línea de comandos informará de que la verificación se ha realizado con éxito aunque en realidad haya fallado. En este caso, la respuesta correcta incorrecta también irá acompañada de mensajes de error que muestran el fallo y contradicen el resultado aparentemente con éxito. Corregido en OpenSSL versión 3.0.3 (Afectado 3.0.0,3.0.1,3.0.2)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAMICS PERFECT HARMONY GH180","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:27:12.804295Z","id":"CVE-2022-1343","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.3","matchCriteriaId":"204DDEF8-D6B2-4BD6-860C-B80A49FB225B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*","matchCriteriaId":"E8F29E19-3A64-4426-A2AA-F169440267CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*","matchCriteriaId":"1FE996B1-6951-4F85-AA58-B99A379D2163"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"62347994-1353-497C-9C4A-D5D8D95F67E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"361B791A-D336-4431-8F68-8135BEFFAEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"4BB0FDCF-3750-44C6-AC5C-0CC2AAD14093"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:hyper-v:*:*","matchCriteriaId":"80774A35-B0B8-4F9C-99CA-23849978D158"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire\\,_enterprise_sds_\\&_hci_storage_node:-:*:*:*:*:*:*:*","matchCriteriaId":"DAA3919C-B2B1-4CB5-BA76-7A079AAFFC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*","matchCriteriaId":"D6D700C5-F67F-4FFB-BE69-D524592A3D2E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1236B66D-EB11-4324-929F-E2B86683C3C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*","matchCriteriaId":"281DFC67-46BB-4FC2-BE03-3C65C9311F65"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FDD92BFA-9117-4E6E-A13F-ED064B4B7284"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:a700s:-:*:*:*:*:*:*:*","matchCriteriaId":"4B7DA42F-5D64-4967-A2D4-6210FE507841"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"578BB9A7-BF28-4068-A9A6-1DE19CEEC293"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_500f:-:*:*:*:*:*:*:*","matchCriteriaId":"2AB58180-E5E0-4056-ABF9-A99E9F6A9E86"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_8300_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"CA79D39A-A5F2-4C44-A805-5113065F8C25"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_8300:-:*:*:*:*:*:*:*","matchCriteriaId":"4CA55FBD-6EBA-49C8-92BA-2B1BCCB18A3A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_8700_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"70ECC434-DF20-49A6-B4CF-D5CCA480E57D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_8700:-:*:*:*:*:*:*:*","matchCriteriaId":"232DC609-8023-41F9-8CE3-1B31CE2F2D93"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_a400_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56FD9B9A-BBE5-4CA5-B9F9-B16E1FE738C8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_a400:-:*:*:*:*:*:*:*","matchCriteriaId":"F3E70A56-DBA8-45C7-8C49-1A036501156F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fabric-attached_storage_a400_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0BA5679F-B7F4-482B-92B3-52121124829F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fabric-attached_storage_a400:-:*:*:*:*:*:*:*","matchCriteriaId":"02F063AC-FC82-45E4-A977-243FB3569904"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_500f_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"86E430A7-F93D-422B-BC9E-99C17CC2BF6F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_500f:-:*:*:*:*:*:*:*","matchCriteriaId":"DBC58E3E-C8AA-4400-8A48-733B321CC924"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_8300_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D5CDADAB-72A5-4526-8432-E6C9AC56B29F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_8300:-:*:*:*:*:*:*:*","matchCriteriaId":"E64576DE-90F0-4F5E-9C82-AB745CFEDBB7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_8700_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"EF5AFE69-7990-4F80-9E63-D8AD58AA3A2D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_8700:-:*:*:*:*:*:*:*","matchCriteriaId":"6415E28A-4EAC-4F7F-BD81-1A55CE8B6F40"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"108A2215-50FB-4074-94CF-C130FA14566D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*","matchCriteriaId":"7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6770B6C3-732E-4E22-BF1C-2D2FD610061C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*","matchCriteriaId":"9F9C8C20-42EB-4AB5-BD97-212DEB070C43"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D0B4AD8A-F172-4558-AEC6-FF424BA2D912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*","matchCriteriaId":"8497A4C9-8474-4A62-8331-3FE862ED4098"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"32F0B6C0-F930-480D-962B-3F4EFDCC13C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*","matchCriteriaId":"803BC414-B250-4E3A-A478-A3881340D6B8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7FFF7106-ED78-49BA-9EC5-B889E3685D53"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*","matchCriteriaId":"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0FEB3337-BFDE-462A-908B-176F92053CEC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*","matchCriteriaId":"736AEAE9-782B-4F71-9893-DED53367E102"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56409CEC-5A1E-4450-AA42-641E459CC2AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*","matchCriteriaId":"B06F4839-D16A-4A61-9BB5-55B13F41E47F"}]}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2eda98790c5c2741d76d23cc1e74b0dc4f4b391a","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20220602-0009/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220503.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2eda98790c5c2741d76d23cc1e74b0dc4f4b391a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20220602-0009/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220503.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-419740.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-942865.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-953464.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2022-1434","sourceIdentifier":"openssl-security@openssl.org","published":"2022-05-03T16:15:18.917","lastModified":"2026-10-14T13:17:18.813","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing a man-in-the-middle attack to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such that the modified data would still pass the MAC integrity check. Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0 endpoint will always be rejected by the recipient and the connection will fail at that point. Many application protocols require data to be sent from the client to the server first. Therefore, in such a case, only an OpenSSL 3.0 server would be impacted when talking to a non-OpenSSL 3.0 client. If both endpoints are OpenSSL 3.0 then the attacker could modify data being sent in both directions. In this case both clients and servers could be affected, regardless of the application protocol. Note that in the absence of an attacker this bug means that an OpenSSL 3.0 endpoint communicating with a non-OpenSSL 3.0 endpoint will fail to complete the handshake when using this ciphersuite. The confidentiality of data is not impacted by this issue, i.e. an attacker cannot decrypt data that has been encrypted using this ciphersuite - they can only modify it. In order for this attack to work both endpoints must legitimately negotiate the RC4-MD5 ciphersuite. This ciphersuite is not compiled by default in OpenSSL 3.0, and is not available within the default provider or the default ciphersuite list. This ciphersuite will never be used if TLSv1.3 has been negotiated. In order for an OpenSSL 3.0 endpoint to use this ciphersuite the following must have occurred: 1) OpenSSL must have been compiled with the (non-default) compile time option enable-weak-ssl-ciphers 2) OpenSSL must have had the legacy provider explicitly loaded (either through application code or via configuration) 3) The ciphersuite must have been explicitly added to the ciphersuite list 4) The libssl security level must have been set to 0 (default is 1) 5) A version of SSL/TLS below TLSv1.3 must have been negotiated 6) Both endpoints must negotiate the RC4-MD5 ciphersuite in preference to any others that both endpoints have in common Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)."},{"lang":"es","value":"La implementación de OpenSSL versión 3.0 del cifrado RC4-MD5 usa incorrectamente los datos AAD como clave MAC. Esto hace que la clave MAC sea trivialmente predecible. Un atacante podría aprovechar este problema llevando a cabo un ataque de intermediario para modificar los datos que son enviados desde un endpoint a un destinatario de OpenSSL versión 3.0 de forma que los datos modificados sigan pasando la comprobación de integridad MAC. Tenga en cuenta que los datos enviados desde un endpoint OpenSSL versión 3.0 a un endpoint no OpenSSL versión 3.0 siempre serán rechazados por el destinatario y la conexión fallará en ese punto. Muchos protocolos de aplicación requieren que los datos sean enviados primero desde el cliente al servidor. Por lo tanto, en tal caso, sólo un servidor OpenSSL versión 3.0 estaría afectado cuando hablara con un cliente no OpenSSL versión 3.0. Si ambos endpoints son OpenSSL versión 3.0, el atacante podría modificar los datos que son enviados en ambas direcciones. En este caso, tanto los clientes como los servidores podrían verse afectados, independientemente del protocolo de aplicación. Tenga en cuenta que, en ausencia de un atacante, este fallo significa que un endpoint de OpenSSL 3.0 que sea comunicado con un endpoint que no sea de OpenSSL 3.0 no podrá completar el apretón de manos cuando sea usado este cifrado. La confidencialidad de los datos no está afectada por este problema, es decir, un atacante no puede descifrar los datos que han sido encriptados usando este cifrado, sólo puede modificarlos. Para que este ataque funcione, ambos endpoints deben negociar legítimamente el cifrado RC4-MD5. Este ciphersuite no está compilado por defecto en OpenSSL versión 3.0, y no está disponible en el proveedor por defecto o en la lista de ciphersuite por defecto. Esta ciphersuite nunca será usado si ha sido negociado TLSv1.3. Para que un endpoint de OpenSSL versión 3.0 use esta ciphersuite debe haber ocurrido lo siguiente 1) OpenSSL debe haber sido compilado con la opción de tiempo de compilación (no predeterminada) enable-weak-ssl-ciphers 2) OpenSSL debe tener el proveedor heredado cargado explícitamente (ya sea a través del código de la aplicación o por medio de la configuración) 3) La ciphersuite debe haber sido añadida explícitamente a la lista de ciphersuite 4) El nivel de seguridad de libssl debe haber sido establecido en 0 (el valor predeterminado es 1) 5) Una versión de SSL/TLS inferior a TLSv1. 3 debe haber sido negociada 6) Ambos endpoints deben negociar el ciphersuite RC4-MD5 con preferencia a cualquier otro que ambos endpoints tengan en común Corregido en OpenSSL versión 3.0.3 (Afectado 3.0.0,3.0.1,3.0.2)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.3","matchCriteriaId":"204DDEF8-D6B2-4BD6-860C-B80A49FB225B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*","matchCriteriaId":"E8F29E19-3A64-4426-A2AA-F169440267CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*","matchCriteriaId":"1FE996B1-6951-4F85-AA58-B99A379D2163"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"62347994-1353-497C-9C4A-D5D8D95F67E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"361B791A-D336-4431-8F68-8135BEFFAEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"4BB0FDCF-3750-44C6-AC5C-0CC2AAD14093"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:hyper-v:*:*","matchCriteriaId":"80774A35-B0B8-4F9C-99CA-23849978D158"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire\\,_enterprise_sds_\\&_hci_storage_node:-:*:*:*:*:*:*:*","matchCriteriaId":"DAA3919C-B2B1-4CB5-BA76-7A079AAFFC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*","matchCriteriaId":"D6D700C5-F67F-4FFB-BE69-D524592A3D2E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FDD92BFA-9117-4E6E-A13F-ED064B4B7284"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:a700s:-:*:*:*:*:*:*:*","matchCriteriaId":"4B7DA42F-5D64-4967-A2D4-6210FE507841"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6770B6C3-732E-4E22-BF1C-2D2FD610061C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*","matchCriteriaId":"9F9C8C20-42EB-4AB5-BD97-212DEB070C43"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7FFF7106-ED78-49BA-9EC5-B889E3685D53"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*","matchCriteriaId":"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56409CEC-5A1E-4450-AA42-641E459CC2AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*","matchCriteriaId":"B06F4839-D16A-4A61-9BB5-55B13F41E47F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"108A2215-50FB-4074-94CF-C130FA14566D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*","matchCriteriaId":"7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"32F0B6C0-F930-480D-962B-3F4EFDCC13C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*","matchCriteriaId":"803BC414-B250-4E3A-A478-A3881340D6B8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0FEB3337-BFDE-462A-908B-176F92053CEC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*","matchCriteriaId":"736AEAE9-782B-4F71-9893-DED53367E102"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D0B4AD8A-F172-4558-AEC6-FF424BA2D912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*","matchCriteriaId":"8497A4C9-8474-4A62-8331-3FE862ED4098"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_8300_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"CA79D39A-A5F2-4C44-A805-5113065F8C25"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_8300:-:*:*:*:*:*:*:*","matchCriteriaId":"4CA55FBD-6EBA-49C8-92BA-2B1BCCB18A3A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_8300_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D5CDADAB-72A5-4526-8432-E6C9AC56B29F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_8300:-:*:*:*:*:*:*:*","matchCriteriaId":"E64576DE-90F0-4F5E-9C82-AB745CFEDBB7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_8700_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"70ECC434-DF20-49A6-B4CF-D5CCA480E57D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_8700:-:*:*:*:*:*:*:*","matchCriteriaId":"232DC609-8023-41F9-8CE3-1B31CE2F2D93"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_8700_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"EF5AFE69-7990-4F80-9E63-D8AD58AA3A2D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_8700:-:*:*:*:*:*:*:*","matchCriteriaId":"6415E28A-4EAC-4F7F-BD81-1A55CE8B6F40"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_a400_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56FD9B9A-BBE5-4CA5-B9F9-B16E1FE738C8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_a400:-:*:*:*:*:*:*:*","matchCriteriaId":"F3E70A56-DBA8-45C7-8C49-1A036501156F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fabric-attached_storage_a400_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0BA5679F-B7F4-482B-92B3-52121124829F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fabric-attached_storage_a400:-:*:*:*:*:*:*:*","matchCriteriaId":"02F063AC-FC82-45E4-A977-243FB3569904"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1236B66D-EB11-4324-929F-E2B86683C3C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*","matchCriteriaId":"281DFC67-46BB-4FC2-BE03-3C65C9311F65"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"578BB9A7-BF28-4068-A9A6-1DE19CEEC293"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_500f:-:*:*:*:*:*:*:*","matchCriteriaId":"2AB58180-E5E0-4056-ABF9-A99E9F6A9E86"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_500f_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"86E430A7-F93D-422B-BC9E-99C17CC2BF6F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_500f:-:*:*:*:*:*:*:*","matchCriteriaId":"DBC58E3E-C8AA-4400-8A48-733B321CC924"}]}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7d56a74a96828985db7354a55227a511615f732b","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20220602-0009/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220503.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7d56a74a96828985db7354a55227a511615f732b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20220602-0009/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220503.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-953464.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2022-1473","sourceIdentifier":"openssl-security@openssl.org","published":"2022-05-03T16:15:18.957","lastModified":"2026-10-14T13:17:19.207","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process periodically decodes certificates or keys its memory usage will expand without bounds and the process might be terminated by the operating system causing a denial of service. Also traversing the empty hash table entries will take increasingly more time. Typically such long lived processes might be TLS clients or TLS servers configured to accept client certificate authentication. The function was added in the OpenSSL 3.0 version thus older releases are not affected by the issue. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)."},{"lang":"es","value":"La función OPENSSL_LH_flush(), que vacía una tabla hash, contiene un error que rompe el reúso de la memoria ocupada por las entradas de la tabla hash eliminadas. Esta función es usado cuando son descodificados certificados o claves. Si un proceso de larga duración decodifica periódicamente certificados o claves, su uso de memoria será expandida sin límites y el proceso podría ser terminado por el sistema operativo causando una denegación de servicio. Además, recorrer las entradas vacías de la tabla hash llevará cada vez más tiempo. Normalmente, estos procesos de larga duración pueden ser clientes TLS o servidores TLS configurados para aceptar la autenticación de certificados de clientes. La función fue añadida en la versión 3.0 de OpenSSL, por lo que las versiones anteriores no están afectadas por el problema. Corregido en OpenSSL versión 3.0.3 (Afectado 3.0.0,3.0.1,3.0.2)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2)","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAMICS PERFECT HARMONY GH180","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:27:10.537811Z","id":"CVE-2022-1473","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-459"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-459"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.3","matchCriteriaId":"204DDEF8-D6B2-4BD6-860C-B80A49FB225B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*","matchCriteriaId":"E8F29E19-3A64-4426-A2AA-F169440267CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*","matchCriteriaId":"1FE996B1-6951-4F85-AA58-B99A379D2163"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"62347994-1353-497C-9C4A-D5D8D95F67E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"361B791A-D336-4431-8F68-8135BEFFAEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"4BB0FDCF-3750-44C6-AC5C-0CC2AAD14093"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:hyper-v:*:*","matchCriteriaId":"80774A35-B0B8-4F9C-99CA-23849978D158"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire\\,_enterprise_sds_\\&_hci_storage_node:-:*:*:*:*:*:*:*","matchCriteriaId":"DAA3919C-B2B1-4CB5-BA76-7A079AAFFC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*","matchCriteriaId":"D6D700C5-F67F-4FFB-BE69-D524592A3D2E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FDD92BFA-9117-4E6E-A13F-ED064B4B7284"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:a700s:-:*:*:*:*:*:*:*","matchCriteriaId":"4B7DA42F-5D64-4967-A2D4-6210FE507841"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6770B6C3-732E-4E22-BF1C-2D2FD610061C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*","matchCriteriaId":"9F9C8C20-42EB-4AB5-BD97-212DEB070C43"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7FFF7106-ED78-49BA-9EC5-B889E3685D53"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*","matchCriteriaId":"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56409CEC-5A1E-4450-AA42-641E459CC2AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*","matchCriteriaId":"B06F4839-D16A-4A61-9BB5-55B13F41E47F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"108A2215-50FB-4074-94CF-C130FA14566D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*","matchCriteriaId":"7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"32F0B6C0-F930-480D-962B-3F4EFDCC13C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*","matchCriteriaId":"803BC414-B250-4E3A-A478-A3881340D6B8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0FEB3337-BFDE-462A-908B-176F92053CEC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*","matchCriteriaId":"736AEAE9-782B-4F71-9893-DED53367E102"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D0B4AD8A-F172-4558-AEC6-FF424BA2D912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*","matchCriteriaId":"8497A4C9-8474-4A62-8331-3FE862ED4098"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_8300_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"CA79D39A-A5F2-4C44-A805-5113065F8C25"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_8300:-:*:*:*:*:*:*:*","matchCriteriaId":"4CA55FBD-6EBA-49C8-92BA-2B1BCCB18A3A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_8300_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D5CDADAB-72A5-4526-8432-E6C9AC56B29F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_8300:-:*:*:*:*:*:*:*","matchCriteriaId":"E64576DE-90F0-4F5E-9C82-AB745CFEDBB7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_8700_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"70ECC434-DF20-49A6-B4CF-D5CCA480E57D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_8700:-:*:*:*:*:*:*:*","matchCriteriaId":"232DC609-8023-41F9-8CE3-1B31CE2F2D93"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_8700_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"EF5AFE69-7990-4F80-9E63-D8AD58AA3A2D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_8700:-:*:*:*:*:*:*:*","matchCriteriaId":"6415E28A-4EAC-4F7F-BD81-1A55CE8B6F40"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_a400_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56FD9B9A-BBE5-4CA5-B9F9-B16E1FE738C8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_a400:-:*:*:*:*:*:*:*","matchCriteriaId":"F3E70A56-DBA8-45C7-8C49-1A036501156F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fabric-attached_storage_a400_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0BA5679F-B7F4-482B-92B3-52121124829F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fabric-attached_storage_a400:-:*:*:*:*:*:*:*","matchCriteriaId":"02F063AC-FC82-45E4-A977-243FB3569904"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"1236B66D-EB11-4324-929F-E2B86683C3C7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*","matchCriteriaId":"281DFC67-46BB-4FC2-BE03-3C65C9311F65"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"578BB9A7-BF28-4068-A9A6-1DE19CEEC293"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_500f:-:*:*:*:*:*:*:*","matchCriteriaId":"2AB58180-E5E0-4056-ABF9-A99E9F6A9E86"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_500f_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"86E430A7-F93D-422B-BC9E-99C17CC2BF6F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_500f:-:*:*:*:*:*:*:*","matchCriteriaId":"DBC58E3E-C8AA-4400-8A48-733B321CC924"}]}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=64c85430f95200b6b51fe9475bd5203f7c19daf1","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/202210-02","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220602-0009/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220503.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=64c85430f95200b6b51fe9475bd5203f7c19daf1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202210-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220602-0009/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220503.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-419740.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-942865.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-953464.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2022-29242","sourceIdentifier":"security-advisories@github.com","published":"2022-05-24T15:15:08.097","lastModified":"2026-06-17T04:39:54.073","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"GOST engine is a reference implementation of the Russian GOST crypto algorithms for OpenSSL. TLS clients using GOST engine when ciphersuite `TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC` is agreed and the server uses 512 bit GOST secret keys are vulnerable to buffer overflow. GOST engine version 3.0.1 contains a patch for this issue. Disabling ciphersuite `TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC` is a possible workaround."},{"lang":"es","value":"GOST engine es una implementación de referencia de los algoritmos criptográficos rusos GOST para OpenSSL. Los clientes TLS usando el motor GOST cuando el cifrado \"TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC\" está acordado y el servidor usa claves secretas GOST de 512 bits son vulnerables a un desbordamiento del búfer. GOST engine versión 3.0.1 contiene un parche para este problema. Deshabilitar el cifrado \"TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC\" es una posible mitigación"}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"gost-engine","product":"engine","versions":[{"version":"< 3.0.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T14:06:47.434124Z","id":"CVE-2022-29242","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gost_engine_project:gost_engine:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0.1","matchCriteriaId":"CF53F170-E02E-4150-9041-7F91E35CD437"}]}]}],"references":[{"url":"https://github.com/gost-engine/engine/commit/7df766124f87768b43b9e8947c5a01e17545772c","source":"security-advisories@github.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/gost-engine/engine/commit/b2b4d629f100eaee9f5942a106b1ccefe85b8808","source":"security-advisories@github.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/gost-engine/engine/commit/c6655a0b620a3e31f085cc906f8073fe81b2fad3","source":"security-advisories@github.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/gost-engine/engine/releases/tag/v3.0.1","source":"security-advisories@github.com","tags":["Release Notes","Third Party Advisory"]},{"url":"https://github.com/gost-engine/engine/security/advisories/GHSA-2rmw-8wpg-vgw5","source":"security-advisories@github.com","tags":["Third Party Advisory"]},{"url":"https://github.com/gost-engine/engine/commit/7df766124f87768b43b9e8947c5a01e17545772c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/gost-engine/engine/commit/b2b4d629f100eaee9f5942a106b1ccefe85b8808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/gost-engine/engine/commit/c6655a0b620a3e31f085cc906f8073fe81b2fad3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/gost-engine/engine/releases/tag/v3.0.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"https://github.com/gost-engine/engine/security/advisories/GHSA-2rmw-8wpg-vgw5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-25153","sourceIdentifier":"csirt@divd.nl","published":"2022-06-09T17:15:08.903","lastModified":"2026-06-17T04:33:06.217","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ITarian Endpoint Manage Communication Client, prior to version 6.43.41148.21120, is compiled using insecure OpenSSL settings. Due to this setting, a malicious actor with low privileges access to a system can escalate his privileges to SYSTEM abusing an insecure openssl.conf lookup."},{"lang":"es","value":"El cliente de comunicación de ITarian Endpoint Manage, versiones anteriores a 6.43.41148.21120, es compilado usando una configuración no segura de OpenSSL. Debido a esta configuración, un actor malicioso con acceso de bajos privilegios a un sistema puede escalar sus privilegios a SYSTEM abusando de una búsqueda no segura de openssl.conf"}],"affected":[{"source":"csirt@divd.nl","affectedData":[{"vendor":"ITarian","product":"Endpoint Manager Communication Client for Windows","versions":[{"version":"any version","lessThan":"6.43.41148.21120","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"csirt@divd.nl","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"csirt@divd.nl","type":"Secondary","description":[{"lang":"en","value":"CWE-275"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itarian:endpoint_manager_communication_client:*:*:*:*:*:windows:*:*","versionEndExcluding":"7.0.42012.22030","matchCriteriaId":"293D7861-2A0A-48DE-9116-DEAE177143F6"}]}]}],"references":[{"url":"https://csirt.divd.nl/CVE-2022-25153","source":"csirt@divd.nl","tags":["Third Party Advisory"]},{"url":"https://csirt.divd.nl/DIVD-2021-00037","source":"csirt@divd.nl","tags":["Third Party Advisory"]},{"url":"https://csirt.divd.nl/CVE-2022-25153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://csirt.divd.nl/DIVD-2021-00037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-32253","sourceIdentifier":"productcert@siemens.com","published":"2022-06-14T10:15:20.813","lastModified":"2026-06-17T04:46:58.853","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). Due to improper input validation, the OpenSSL certificate's password could be printed to a file reachable by an attacker."},{"lang":"es","value":"Se ha identificado una vulnerabilidad en SINEMA Remote Connect Server (Todas las versiones anteriores a V3.1). Debido a una comprobación de entrada inapropiada, la contraseña del certificado OpenSSL podría imprimirse en un archivo accesible para un atacante"}],"affected":[{"source":"productcert@siemens.com","affectedData":[{"vendor":"Siemens","product":"SINEMA Remote Connect Server","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"productcert@siemens.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"productcert@siemens.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1","matchCriteriaId":"98CC9C9A-FE14-4D50-A8EC-C309229356C8"}]}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html","source":"productcert@siemens.com"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","source":"productcert@siemens.com","tags":["Patch","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-484086.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-2068","sourceIdentifier":"openssl-security@openssl.org","published":"2022-06-21T15:15:09.060","lastModified":"2026-10-14T13:17:20.110","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze)."},{"lang":"es","value":"Además de una inyección de comandos de shell c_rehash identificada en CVE-2022-1292, se encontraron otras circunstancias en las que el script c_rehash no sanea adecuadamente los metacaracteres de shell para evitar la inyección de comandos mediante la revisión del código. Cuando fue corregida la CVE-2022-1292 no ha sido detectado que se presentan otros lugares en el script en los que los nombres de archivo de los certificados a los que es aplicado el hash son pasados posiblemente a un comando ejecutado mediante el shell. Este script es distribuido por algunos sistemas operativos de manera que es ejecutado automáticamente. En dichos sistemas operativos, un atacante podría ejecutar comandos arbitrarios con los privilegios del script. El uso del script c_rehash es considerado obsoleto y debe ser sustituido por la herramienta de línea de comandos OpenSSL rehash. Corregido en OpenSSL versión 3.0.4 (Afectados 3.0.0,3.0.1,3.0.2,3.0.3). Corregido en OpenSSL versión 1.1.1p (Afectado 1.1.1-1.1.1o). Corregido en OpenSSL versión 1.0.2zf (Afectado 1.0.2-1.0.2ze)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3)","status":"affected"},{"version":"Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o)","status":"affected"},{"version":"Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze)","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-07-21T00:00:00+00:00","id":"CVE-2022-2068","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zf","matchCriteriaId":"C9B6EB2C-EF9B-44AF-B083-BF59B8107801"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1p","matchCriteriaId":"5EAA5CAF-1DE6-4730-9E07-9E6594A5D6BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.4","matchCriteriaId":"4188DBDA-354F-4939-904D-0A9F8A8AB703"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6FEEC2-9F11-4643-8827-749718254FED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*","matchCriteriaId":"80E516C0-98A4-4ADE-B69F-66A772E2BAAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","matchCriteriaId":"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0","matchCriteriaId":"C89891C1-DFD7-4E1F-80A9-7485D86A15B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*","matchCriteriaId":"4664B195-AF14-4834-82B3-0B2C98020EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*","matchCriteriaId":"75BC588E-CDF0-404E-AD61-02093A1DF343"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:sp2:*:*:*:*:*:*","matchCriteriaId":"A334F7B4-7283-4453-BAED-D2E01B7F8A6E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*","matchCriteriaId":"85DF4B3F-4BBC-42B7-B729-096934523D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*","matchCriteriaId":"A3C19813-E823-456A-B1CE-EC0684CE1953"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:ontap_antivirus_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"759D1A24-B23B-404E-AD39-F18D7DBAD501"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*","matchCriteriaId":"E7CF3019-975D-40BB-A8A4-894E62BD3797"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"361B791A-D336-4431-8F68-8135BEFFAEA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:smi-s_provider:-:*:*:*:*:*:*:*","matchCriteriaId":"4BB0FDCF-3750-44C6-AC5C-0CC2AAD14093"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:hyper-v:*:*","matchCriteriaId":"80774A35-B0B8-4F9C-99CA-23849978D158"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*","matchCriteriaId":"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*","matchCriteriaId":"95BA156C-C977-4F0C-8DFB-3FAE9CC8C02D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*","matchCriteriaId":"AD7447BC-F315-4298-A822-549942FC118B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"5921A877-18BF-43FE-915C-D226E140ACFC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:*","matchCriteriaId":"7296A1F2-D315-4FD5-8A73-65C480C855BE"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"FD7CFE0E-9D1E-4495-B302-89C3096FC0DF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*","matchCriteriaId":"F63A3FA7-AAED-4A9D-9FDE-6195302DA0F6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"89612649-BACF-4FAC-9BA4-324724FD93A6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:*","matchCriteriaId":"F3D9B255-C1AF-42D1-BF9B-13642FBDC080"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*","matchCriteriaId":"CDDF61B7-EC5C-467C-B710-B89F502CD04F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6770B6C3-732E-4E22-BF1C-2D2FD610061C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*","matchCriteriaId":"9F9C8C20-42EB-4AB5-BD97-212DEB070C43"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7FFF7106-ED78-49BA-9EC5-B889E3685D53"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*","matchCriteriaId":"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56409CEC-5A1E-4450-AA42-641E459CC2AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*","matchCriteriaId":"B06F4839-D16A-4A61-9BB5-55B13F41E47F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D0B4AD8A-F172-4558-AEC6-FF424BA2D912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*","matchCriteriaId":"8497A4C9-8474-4A62-8331-3FE862ED4098"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_8300_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D5CDADAB-72A5-4526-8432-E6C9AC56B29F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_8300:-:*:*:*:*:*:*:*","matchCriteriaId":"E64576DE-90F0-4F5E-9C82-AB745CFEDBB7"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_8700_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"EF5AFE69-7990-4F80-9E63-D8AD58AA3A2D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_8700:-:*:*:*:*:*:*:*","matchCriteriaId":"6415E28A-4EAC-4F7F-BD81-1A55CE8B6F40"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:fas_a400_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"CAA3A789-79F7-4DC8-9722-3958A3162EB4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:fas_a400:-:*:*:*:*:*:*:*","matchCriteriaId":"18C138F0-706F-44A8-880E-133F66DE164A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_8300_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"CA79D39A-A5F2-4C44-A805-5113065F8C25"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_8300:-:*:*:*:*:*:*:*","matchCriteriaId":"4CA55FBD-6EBA-49C8-92BA-2B1BCCB18A3A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_8700_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"70ECC434-DF20-49A6-B4CF-D5CCA480E57D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_8700:-:*:*:*:*:*:*:*","matchCriteriaId":"232DC609-8023-41F9-8CE3-1B31CE2F2D93"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:aff_a400_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56FD9B9A-BBE5-4CA5-B9F9-B16E1FE738C8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:aff_a400:-:*:*:*:*:*:*:*","matchCriteriaId":"F3E70A56-DBA8-45C7-8C49-1A036501156F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:sannav:-:*:*:*:*:*:*:*","matchCriteriaId":"E5BAE3DB-F5EE-4AFB-A60E-FE8B809BDE66"}]}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220707-0008/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5169","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220621.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Nov/0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220707-0008/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220621.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-146325.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-332410.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2022-31085","sourceIdentifier":"security-advisories@github.com","published":"2022-06-27T21:15:08.217","lastModified":"2026-06-17T04:44:45.907","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the session files include the LDAP user name and password in clear text if the PHP OpenSSL extension is not installed or encryption is disabled by configuration. This issue has been fixed in version 8.0. Users unable to upgrade should install the PHP OpenSSL extension and make sure session encryption is enabled in LAM main configuration."},{"lang":"es","value":"LDAP Account Manager (LAM) es un frontend web para administrar las entradas (por ejemplo, usuarios, grupos, configuraciones DHCP) almacenadas en un directorio LDAP. En versiones anteriores a 8.0, los archivos de sesión incluyen el nombre de usuario y la contraseña de LDAP en texto sin cifrar si la extensión OpenSSL de PHP no está instalada o el cifrado está deshabilitado por configuración. Este problema ha sido corregido en versión 8.0. Los usuarios que no puedan actualizar deberán instalar la extensión PHP OpenSSL y asegurarse de que el cifrado de la sesión está habilitado en la configuración principal de LAM"}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"LDAPAccountManager","product":"lam","versions":[{"version":"< 8.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV30":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T14:04:27.402755Z","id":"CVE-2022-31085","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-311"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ldap-account-manager:ldap_account_manager:*:*:*:*:*:internet_explorer:*:*","versionEndExcluding":"8.0","matchCriteriaId":"FE63DDE0-D43E-4D54-8E32-12BDC64076D5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6FEEC2-9F11-4643-8827-749718254FED"}]}]}],"references":[{"url":"https://github.com/LDAPAccountManager/lam/commit/f1d5d04952f39a1b4ea203d3964fa88e1429dfd4","source":"security-advisories@github.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-6m3q-5c84-6h6j","source":"security-advisories@github.com","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5177","source":"security-advisories@github.com","tags":["Third Party Advisory"]},{"url":"https://github.com/LDAPAccountManager/lam/commit/f1d5d04952f39a1b4ea203d3964fa88e1429dfd4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-6m3q-5c84-6h6j","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-2274","sourceIdentifier":"openssl-security@openssl.org","published":"2022-07-01T08:15:07.687","lastModified":"2026-10-14T13:17:20.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happen during the computation. As a consequence of the memory corruption an attacker may be able to trigger a remote code execution on the machine performing the computation. SSL/TLS servers or other servers using 2048 bit RSA private keys running on machines supporting AVX512IFMA instructions of the X86_64 architecture are affected by this issue."},{"lang":"es","value":"OpenSSL versión 3.0.4, introdujo un grave error en la implementación de RSA para CPUs X86_64 que soportan las instrucciones AVX512IFMA. Este problema hace que la implementación de RSA con claves privadas de 2048 bits sea incorrecta en dichas máquinas y que sea producida una corrupción de memoria durante el cálculo. Como consecuencia de la corrupción de memoria, un atacante puede ser capaz de desencadenar una ejecución de código remota en la máquina que lleva a cabo el cálculo. Los servidores SSL/TLS u otros servidores usando claves privadas RSA de 2048 bits que son ejecutadas en máquinas que soportan instrucciones AVX512IFMA de la arquitectura X86_64 están afectados por este problema"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Affects OpenSSL 3.0.4","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"064E8433-3B62-4C85-868C-58BFD3E8FD49"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*","matchCriteriaId":"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*","matchCriteriaId":"CDDF61B7-EC5C-467C-B710-B89F502CD04F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6770B6C3-732E-4E22-BF1C-2D2FD610061C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*","matchCriteriaId":"9F9C8C20-42EB-4AB5-BD97-212DEB070C43"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7FFF7106-ED78-49BA-9EC5-B889E3685D53"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*","matchCriteriaId":"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56409CEC-5A1E-4450-AA42-641E459CC2AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*","matchCriteriaId":"B06F4839-D16A-4A61-9BB5-55B13F41E47F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D0B4AD8A-F172-4558-AEC6-FF424BA2D912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*","matchCriteriaId":"8497A4C9-8474-4A62-8331-3FE862ED4098"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=4d8a88c134df634ba610ff8db1eb8478ac5fd345","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/issues/18625","source":"openssl-security@openssl.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220715-0010/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220705.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=4d8a88c134df634ba610ff8db1eb8478ac5fd345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/issues/18625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220715-0010/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220705.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-332410.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2022-2097","sourceIdentifier":"openssl-security@openssl.org","published":"2022-07-05T11:15:08.340","lastModified":"2026-10-14T13:17:20.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p)."},{"lang":"es","value":"El modo AES OCB para plataformas x86 de 32 bits que utilizan la implementación optimizada de ensamblaje AES-NI no cifrará la totalidad de los datos en algunas circunstancias.&#xa0;Esto podría revelar dieciséis bytes de datos que ya existían en la memoria y que no estaban escritos.&#xa0;En el caso especial del cifrado \"in situ\", se revelarían dieciséis bytes del texto sin formato.&#xa0;Dado que OpenSSL no es compatible con conjuntos de cifrado basados ??en OCB para TLS y DTLS, ambos no están afectados.&#xa0;Corregido en OpenSSL versión 3.0.5 (Afectado 3.0.0-3.0.4).&#xa0;Corregido en OpenSSL 1.1.1q (Afectado 1.1.1-1.1.1p)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4)","status":"affected"},{"version":"Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p)","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"openssl","product":"openssl","defaultStatus":"unknown","cpes":["cpe:2.3:a:openssl:openssl:1.1.1:*:*:*:*:*:*:*"],"versions":[{"version":"1.1.1","lessThan":"1.1.1q","versionType":"custom","status":"affected"}]},{"vendor":"openssl","product":"openssl","defaultStatus":"unknown","cpes":["cpe:2.3:a:openssl:openssl:3.0.0:*:*:*:*:*:*:*"],"versions":[{"version":"3.0.0","lessThan":"3.0.5","versionType":"custom","status":"affected"}]},{"vendor":"netapp","product":"ontap_antivirus_connector","defaultStatus":"unknown","cpes":["cpe:2.3:a:netapp:ontap_antivirus_connector:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","status":"affected"}]},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility","defaultStatus":"unknown","cpes":["cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","status":"affected"}]},{"vendor":"fedoraproject","product":"fedora","defaultStatus":"unknown","cpes":["cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*"],"versions":[{"version":"35","status":"affected"},{"version":"36","status":"affected"}]},{"vendor":"netapp","product":"active_iq_unified_manager_for_vmware_vsphere","defaultStatus":"unknown","cpes":["cpe:2.3:a:netapp:active_iq_unified_manager_for_vmware_vsphere:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","status":"affected"}]},{"vendor":"netapp","product":"hci_baseboard_management_controller","defaultStatus":"unknown","cpes":["cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:*","cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:*","cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:*","cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:*","cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:*"],"versions":[{"version":"h300s","status":"affected"},{"version":"h410c","status":"affected"},{"version":"h410s","status":"affected"},{"version":"h500s","status":"affected"},{"version":"h700s","status":"affected"}]},{"vendor":"netapp","product":"brocade_fabric_operating_system_firmware","defaultStatus":"unknown","cpes":["cpe:2.3:o:netapp:brocade_fabric_operating_system_firmware:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","status":"affected"}]},{"vendor":"netapp","product":"snapcenter","defaultStatus":"unknown","cpes":["cpe:2.3:a:netapp:snapcenter:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","status":"affected"}]},{"vendor":"netapp","product":"oncommand_insight","defaultStatus":"unknown","cpes":["cpe:2.3:a:netapp:oncommand_insight:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","status":"affected"}]},{"vendor":"netapp","product":"smi-s_provider","defaultStatus":"unknown","cpes":["cpe:2.3:a:netapp:smi-s_provider:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","status":"affected"}]},{"vendor":"siemens","product":"sinec_ins","defaultStatus":"unknown","cpes":["cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"1.0_sp2_update_1","versionType":"custom","status":"affected"}]},{"vendor":"debian","product":"debian_linux","defaultStatus":"unknown","cpes":["cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*"],"versions":[{"version":"10.0","status":"affected"},{"version":"11.0","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-26T19:45:07.166681Z","id":"CVE-2022-2097","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1q","matchCriteriaId":"64B76070-177E-4044-B562-49F6A27F4921"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.5","matchCriteriaId":"90A8CB87-4C26-472D-8770-84D1195F2FD1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*","matchCriteriaId":"80E516C0-98A4-4ADE-B69F-66A772E2BAAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","matchCriteriaId":"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*","matchCriteriaId":"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*","matchCriteriaId":"62347994-1353-497C-9C4A-D5D8D95F67E8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6770B6C3-732E-4E22-BF1C-2D2FD610061C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6770B6C3-732E-4E22-BF1C-2D2FD610061C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7FFF7106-ED78-49BA-9EC5-B889E3685D53"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*","matchCriteriaId":"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56409CEC-5A1E-4450-AA42-641E459CC2AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*","matchCriteriaId":"B06F4839-D16A-4A61-9BB5-55B13F41E47F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D0B4AD8A-F172-4558-AEC6-FF424BA2D912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*","matchCriteriaId":"8497A4C9-8474-4A62-8331-3FE862ED4098"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*","matchCriteriaId":"CDDF61B7-EC5C-467C-B710-B89F502CD04F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0","matchCriteriaId":"C89891C1-DFD7-4E1F-80A9-7485D86A15B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*","matchCriteriaId":"4664B195-AF14-4834-82B3-0B2C98020EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*","matchCriteriaId":"75BC588E-CDF0-404E-AD61-02093A1DF343"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:sp2:*:*:*:*:*:*","matchCriteriaId":"A334F7B4-7283-4453-BAED-D2E01B7F8A6E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6FEEC2-9F11-4643-8827-749718254FED"}]}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93","source":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/","source":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/202210-02","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220715-0011/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230420-0008/","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2023/dsa-5343","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220705.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202210-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220715-0011/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230420-0008/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2023/dsa-5343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20220705.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-332410.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-625862.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-879734.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2014-8164","sourceIdentifier":"secalert@redhat.com","published":"2022-07-06T20:15:07.810","lastModified":"2026-06-17T00:16:24.983","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red Hat CloudForms 5.x."},{"lang":"es","value":"Una configuración no segura para la verificación de certificados (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) puede conllevar a una omisión de verificación en Red Hat CloudForms versión 5.x"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"Red Hat CloudForms","versions":[{"version":"Red Hat CloudForms 5.x","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","baseScore":6.4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:cloudforms_management_engine:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7098B44F-56BF-42E3-8831-48D0A8E99EE2"}]}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1151208","source":"secalert@redhat.com","tags":["Issue Tracking","Mitigation","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1151208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mitigation","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-32222","sourceIdentifier":"support@hackerone.com","published":"2022-07-14T15:15:08.437","lastModified":"2026-06-17T04:46:54.617","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0 which allowed a default path for openssl.cnf that might be accessible under some circumstances to a non-admin user instead of /etc/ssl as was the case in versions prior to the upgrade to OpenSSL 3."},{"lang":"es","value":"Se presenta una vulnerabilidad criptográfica en Node.js en linux en versiones 18.x anteriores a 18.40.0, que permitía una ruta por defecto para openssl.cnf que podría ser accesible en algunas circunstancias para un usuario no administrador en lugar de /etc/ssl como era el caso en las versiones anteriores a la actualización a OpenSSL 3"}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"NodeJS","product":"Node","defaultStatus":"unaffected","versions":[{"version":"4.0","lessThan":"4.*","versionType":"semver","status":"affected"},{"version":"5.0","lessThan":"5.*","versionType":"semver","status":"affected"},{"version":"6.0","lessThan":"6.*","versionType":"semver","status":"affected"},{"version":"7.0","lessThan":"7.*","versionType":"semver","status":"affected"},{"version":"8.0","lessThan":"8.*","versionType":"semver","status":"affected"},{"version":"9.0","lessThan":"9.*","versionType":"semver","status":"affected"},{"version":"10.0","lessThan":"10.*","versionType":"semver","status":"affected"},{"version":"11.0","lessThan":"11.*","versionType":"semver","status":"affected"},{"version":"12.0","lessThan":"12.*","versionType":"semver","status":"affected"},{"version":"13.0","lessThan":"13.*","versionType":"semver","status":"affected"},{"version":"14.0","lessThan":"14.20.0","versionType":"semver","status":"affected"},{"version":"15.0","lessThan":"15.*","versionType":"semver","status":"affected"},{"version":"16.0","lessThan":"16.20.0","versionType":"semver","status":"affected"},{"version":"17.0","lessThan":"17.*","versionType":"semver","status":"affected"},{"version":"18.0","lessThan":"18.9.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}]},"weaknesses":[{"source":"support@hackerone.com","type":"Secondary","description":[{"lang":"en","value":"CWE-310"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"18.0.0","versionEndExcluding":"18.5.0","matchCriteriaId":"C542B052-1935-4F37-8843-461401EACDCB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0","matchCriteriaId":"C89891C1-DFD7-4E1F-80A9-7485D86A15B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*","matchCriteriaId":"4664B195-AF14-4834-82B3-0B2C98020EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*","matchCriteriaId":"75BC588E-CDF0-404E-AD61-02093A1DF343"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:sinec_ins:1.0:sp2:*:*:*:*:*:*","matchCriteriaId":"A334F7B4-7283-4453-BAED-D2E01B7F8A6E"}]}]}],"references":[{"url":"https://hackerone.com/reports/1695596","source":"support@hackerone.com","tags":["Exploit"]},{"url":"https://hackerone.com/reports/1695596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2022-32223","sourceIdentifier":"support@hackerone.com","published":"2022-07-14T15:15:08.487","lastModified":"2026-06-17T04:46:54.723","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine:* OpenSSL has been installed and “C:\\Program Files\\Common Files\\SSL\\openssl.cnf” exists.Whenever the above conditions are present, `node.exe` will search for `providers.dll` in the current user directory.After that, `node.exe` will try to search for `providers.dll` by the DLL Search Order in Windows.It is possible for an attacker to place the malicious file `providers.dll` under a variety of paths and exploit this vulnerability."},{"lang":"es","value":"Node.js es vulnerable a un Flujo de Ejecución de Secuestro: Secuestro de DLL bajo determinadas condiciones en plataformas Windows. Esta vulnerabilidad puede ser explotada si la víctima presenta las siguientes dependencias en una máquina Windows:* OpenSSL ha sido instalada y \"C:\\Program Files\\Common Files\\SSL\\openssl.cnf\" se presenta. Siempre que sean dadas las condiciones anteriores, \"node.exe\" buscará \"providers.dll\" en el directorio actual del usuario. Después, \"node.exe\" intentará buscar \"providers.dll\" mediante el orden de búsqueda de DLL en Windows. Es posible que un atacante coloque el archivo malicioso \"providers.dll\" en una variedad de rutas y explote esta vulnerabilidad"}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"NodeJS","product":"Node","defaultStatus":"unaffected","versions":[{"version":"4.0","lessThan":"4.*","versionType":"semver","status":"affected"},{"version":"5.0","lessThan":"5.*","versionType":"semver","status":"affected"},{"version":"6.0","lessThan":"6.*","versionType":"semver","status":"affected"},{"version":"7.0","lessThan":"7.*","versionType":"semver","status":"affected"},{"version":"8.0","lessThan":"8.*","versionType":"semver","status":"affected"},{"version":"9.0","lessThan":"9.*","versionType":"semver","status":"affected"},{"version":"10.0","lessThan":"10.*","versionType":"semver","status":"affected"},{"version":"11.0","lessThan":"11.*","versionType":"semver","status":"affected"},{"version":"12.0","lessThan":"12.*","versionType":"semver","status":"affected"},{"version":"13.0","lessThan":"13.*","versionType":"semver","status":"affected"},{"version":"14.0","lessThan":"14.20.0","versionType":"semver","status":"affected"},{"version":"15.0","lessThan":"15.*","versionType":"semver","status":"affected"},{"version":"16.0","lessThan":"16.20.0","versionType":"semver","status":"affected"},{"version":"17.0","lessThan":"17.*","versionType":"semver","status":"affected"},{"version":"18.0","lessThan":"18.5.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.9}]},"weaknesses":[{"source":"support@hackerone.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.14.0","matchCriteriaId":"428DCD7B-6F66-4F18-B780-5BD80143D482"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"14.14.0","versionEndExcluding":"14.20.0","matchCriteriaId":"E1789602-0D21-4A6F-A1BB-60D243AB619D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"16.0.0","versionEndIncluding":"16.12.0","matchCriteriaId":"1D1D0CEC-62E5-4368-B8F2-1DA5DD0B88FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"16.13.0","versionEndExcluding":"16.16.0","matchCriteriaId":"D9D9B02E-C965-408B-999E-1F3DA09B62AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"18.0.0","versionEndExcluding":"18.0.5","matchCriteriaId":"DAE99FBA-CF4F-4DF2-98D5-5D3ACD82A185"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://hackerone.com/reports/1447455","source":"support@hackerone.com","tags":["Permissions Required"]},{"url":"https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/","source":"support@hackerone.com","tags":["Patch","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220915-0001/","source":"support@hackerone.com","tags":["Third Party Advisory"]},{"url":"https://hackerone.com/reports/1447455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220915-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2022-34900","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2022-07-18T15:15:08.663","lastModified":"2026-06-17T04:51:07.460","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39313) Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Dispatcher service. The service loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-15213."},{"lang":"es","value":"Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Parallels Access 6.5.3 (39313) Agent. Un atacante debe obtener primero la capacidad de ejecutar código poco privilegiado en el sistema de destino para poder explotar esta vulnerabilidad. El fallo específico se presenta en el servicio Dispatcher. El servicio carga un archivo de configuración OpenSSL desde una ubicación no segura. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto de SYSTEM. Era ZDI-CAN-15213"}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Parallels","product":"Access","versions":[{"version":"6.5.3 (39313)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:parallels:parallels_access:6.5.4_\\(39313\\):*:*:*:*:*:*:*","matchCriteriaId":"D5E1DBB7-E679-4341-85ED-38CCBF82BCA3"}]}]}],"references":[{"url":"https://kb.parallels.com/en/129010","source":"zdi-disclosures@trendmicro.com","tags":["Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-945/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://kb.parallels.com/en/129010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-945/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2021-3601","sourceIdentifier":"openssl-security@openssl.org","published":"2022-07-29T10:15:12.297","lastModified":"2023-11-07T03:38:08.903","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. OpenSSL does not class this issue as a security vulnerability. The trusted CA store should not contain anything that the user does not trust to issue other certificates. Notes: https://github.com/openssl/openssl/issues/5236#issuecomment-119646061"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2022-3358","sourceIdentifier":"openssl-security@openssl.org","published":"2022-10-11T15:15:10.233","lastModified":"2026-06-17T04:59:22.627","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and EVP_CipherInit_ex2() functions (as well as other similarly named encryption and decryption initialisation functions). Instead of using the custom cipher directly it incorrectly tries to fetch an equivalent cipher from the available providers. An equivalent cipher is found based on the NID passed to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID for a given cipher. However it is possible for an application to incorrectly pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When NID_undef is used in this way the OpenSSL encryption/decryption initialisation function will match the NULL cipher as being equivalent and will fetch this from the available providers. This will succeed if the default provider has been loaded (or if a third party provider has been loaded that offers this cipher). Using the NULL cipher means that the plaintext is emitted as the ciphertext. Applications are only affected by this issue if they call EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to an encryption/decryption initialisation function. Applications that only use SSL/TLS are not impacted by this issue. Fixed in OpenSSL 3.0.6 (Affected 3.0.0-3.0.5)."},{"lang":"es","value":"OpenSSL admite la creación de un cifrado personalizado por medio de la función EVP_CIPHER_meth_new() heredada y las llamadas a funciones asociadas. Esta función quedó obsoleta en OpenSSL versión 3.0 y, en su lugar, es alentado a autores de aplicaciones a usar el nuevo mecanismo de proveedores para implementar cifrados personalizados. Las versiones 3.0.0 a 3.0.5 de OpenSSL manejan incorrectamente los cifrados personalizados heredados pasados a las funciones EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() y EVP_CipherInit_ex2() (así como otras funciones de inicialización de cifrado y descifrado de nombre similar). En lugar de usar el cifrado personalizado directamente, intenta incorrectamente obtener un cifrado equivalente de los proveedores disponibles. Un cifrado equivalente es encontrado basado en el NID pasado a EVP_CIPHER_meth_new(). Este NID es supuesto que representa el único NID para un cifrado dado. Sin embargo, es posible que una aplicación pase incorrectamente NID_undef como este valor en la llamada a EVP_CIPHER_meth_new(). Cuando NID_undef es usado de esta manera, la función de inicialización de encriptación/desencriptación de OpenSSL hará coincidir el cifrado NULL como equivalente y lo obtendrá de los proveedores disponibles. Esto tendrá éxito si ha sido cargado el proveedor por defecto (o si ha sido cargado un proveedor de terceros que ofrece este cifrado). usar el cifrado NULL significa que el texto plano es emitido como el texto cifrado. Las aplicaciones sólo están afectadas por este problema si llaman a EVP_CIPHER_meth_new() usando NID_undef y posteriormente lo usan en una llamada a una función de inicialización de cifrado/descifrado. Las aplicaciones que sólo usan SSL/TLS no están afectadas por este problema. Corregido en OpenSSL versión 3.0.6 (Afectado versiones 3.0.0-3.0.5)"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 3.0.6 (Affected 3.0.0-3.0.5)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.6","matchCriteriaId":"C368158F-6701-4FC7-A627-DC77E7D76D2A"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b","source":"openssl-security@openssl.org"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0023","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202402-08","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20221028-0014/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20221011.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20221028-0014/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20221011.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-3602","sourceIdentifier":"openssl-security@openssl.org","published":"2022-11-01T18:15:10.983","lastModified":"2026-06-17T04:59:49.620","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address to overflow four attacker-controlled bytes on the stack. This buffer overflow could result in a crash (causing a denial of service) or potentially remote code execution. Many platforms implement stack overflow protections which would mitigate against the risk of remote code execution. The risk may be further mitigated based on stack layout for any given platform/compiler. Pre-announcements of CVE-2022-3602 described this issue as CRITICAL. Further analysis based on some of the mitigating factors described above have led this to be downgraded to HIGH. Users are still encouraged to upgrade to a new version as soon as possible. In a TLS client, this can be triggered by connecting to a malicious server. In a TLS server, this can be triggered if the server requests client authentication and a malicious client connects. Fixed in OpenSSL 3.0.7 (Affected 3.0.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6)."},{"lang":"es","value":"Puede activarse una saturación del búfer en la verificación del certificado X.509, específicamente en la verificación de restricciones en el nombre. Tenga en cuenta que esto ocurre después de la verificación de la firma de la cadena de certificados y requiere que una CA haya firmado el certificado malicioso o que la aplicación continúe con la verificación del certificado a pesar de no poder construir una ruta a un emisor confiable. Un atacante puede crear una dirección de correo electrónico maliciosa para desbordar cuatro bytes en la pila de memoria controlados por el atacante. Este desbordamiento del búfer podría provocar un bloqueo (provocando una denegación de servicio) o una potencial ejecución remota de código. Muchas plataformas implementan protecciones contra el desbordamiento de la pila de memoria que mitigarían el riesgo de ejecución remota de código. El riesgo puede mitigarse, aún más, según el diseño de la pila de memoria para cualquier plataforma/compilador determinado. Los anuncios previos de CVE-2022-3602 describieron este problema como CRÍTICO. Un análisis más detallado basado en algunos de los factores mitigantes descritos anteriormente ha llevado a que esto se rebaje a ALTO. Aún se recomienda a los usuarios que actualicen a una nueva versión lo antes posible. En un cliente TLS, esto se puede desencadenar conectándose a un servidor malicioso. En un servidor TLS, esto se puede activar si el servidor solicita la autenticación del cliente y se conecta un cliente malintencionado. Corregido en OpenSSL 3.0.7 (Afectado 3.0.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6)."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"version":"Fixed in OpenSSL 3.0.7 (Affected 3.0.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6)","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"Calibre ICE","defaultStatus":"unknown","versions":[{"version":"V2022.4","lessThan":"V2023.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Mcenter","defaultStatus":"unknown","versions":[{"version":"V5.2.1","lessThan":"V5.3.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204RNA (HSR)","defaultStatus":"unknown","versions":[{"version":"V3.2.7","lessThan":"V3.2.8","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204RNA (PRP)","defaultStatus":"unknown","versions":[{"version":"V3.2.7","lessThan":"V3.2.8","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204RNA EEC (HSR)","defaultStatus":"unknown","versions":[{"version":"V3.2.7","lessThan":"V3.2.8","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204RNA EEC (PRP)","defaultStatus":"unknown","versions":[{"version":"V3.2.7","lessThan":"V3.2.8","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X204RNA EEC (PRP/HSR)","defaultStatus":"unknown","versions":[{"version":"V3.2.7","lessThan":"V3.2.8","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SICAM GridPass","defaultStatus":"unknown","versions":[{"version":"V1.80","lessThan":"V2.20","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RTLS Locating Manager","defaultStatus":"unknown","versions":[{"version":"V2.13.0.0","lessThan":"V2.13.0.3","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:26:56.588972Z","id":"CVE-2022-3602","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.7","matchCriteriaId":"BE1F59CA-02F2-4374-A129-18713496B58B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","matchCriteriaId":"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*","matchCriteriaId":"E30D0E6F-4AE8-4284-8716-991DFA48CC5D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*","matchCriteriaId":"1FE996B1-6951-4F85-AA58-B99A379D2163"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:26:*:*:*:*:*:*:*","matchCriteriaId":"6E4D8269-B407-4C24-AAB0-02F885C7D752"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:27:*:*:*:*:*:*:*","matchCriteriaId":"DBEACBFF-6D05-4B69-BF7A-F7E539D9BF6E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"18.0.0","versionEndExcluding":"18.11.0","matchCriteriaId":"CAC42CA8-8B01-4A19-A83C-A7D4D08E5E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:18.12.0:*:*:*:lts:*:*:*","matchCriteriaId":"7B1F87EE-4E30-4832-BF01-8501E94380EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:19.0.0:*:*:*:-:*:*:*","matchCriteriaId":"F568BBC5-0D8E-499C-9F3E-DDCE5F10F9D5"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/169687/OpenSSL-Security-Advisory-20221101.html","source":"openssl-security@openssl.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/15","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/16","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/17","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/18","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/19","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/20","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/21","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/24","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/1","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/10","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/11","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/12","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/13","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/14","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/15","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/2","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/3","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/5","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/6","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/7","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/9","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/1","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/10","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/11","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/2","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/3","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/5","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/6","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/7","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/9","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fe3b639dc19b325846f4f6801f2f4604f56e3de3","source":"openssl-security@openssl.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63YRPWPUSX3MBHNPIEJZDKQT6YA7UF6S/","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DWP23EZYOBDJQP7HP4YU7W2ABU2YDITS/","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0023","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202211-01","source":"openssl-security@openssl.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20221102-0001/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-W9sdCc2a","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.kb.cert.org/vuls/id/794340","source":"openssl-security@openssl.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.openssl.org/news/secadv/20221101.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/169687/OpenSSL-Security-Advisory-20221101.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/19","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/01/24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/02/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/03/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fe3b639dc19b325846f4f6801f2f4604f56e3de3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63YRPWPUSX3MBHNPIEJZDKQT6YA7UF6S/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DWP23EZYOBDJQP7HP4YU7W2ABU2YDITS/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202211-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20221102-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-W9sdCc2a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00789.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/794340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.openssl.org/news/secadv/20221101.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-408105.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2022-0517","sourceIdentifier":"security@mozilla.org","published":"2022-12-22T20:15:12.540","lastModified":"2026-06-17T04:20:45.677","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitrary code with SYSTEM privilege. This vulnerability affects Mozilla VPN < 2.7.1."},{"lang":"es","value":"Mozilla VPN puede cargar un archivo de configuración OpenSSL desde un directorio no seguro. Un usuario o atacante con privilegios limitados podría aprovechar esto para ejecutar código arbitrario con privilegios de SYSTEM. Esta vulnerabilidad afecta a Mozilla VPN &lt; 2.7.1."}],"affected":[{"source":"security@mozilla.org","affectedData":[{"vendor":"Mozilla","product":"Mozilla VPN","versions":[{"version":"unspecified","lessThan":"2.7.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-16T15:46:24.288092Z","id":"CVE-2022-0517","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:vpn:*:*:*:*:*:*:*:*","versionEndExcluding":"2.7.1","matchCriteriaId":"20D14932-0EB8-4519-91F5-42D3F1B615F2"}]}]}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1752291","source":"security@mozilla.org","tags":["Issue Tracking","Permissions Required","Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2022-08/","source":"security@mozilla.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1752291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required","Vendor Advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2022-08/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-41141","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2023-01-26T18:59:53.780","lastModified":"2026-06-17T05:02:40.510","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-16859."},{"lang":"es","value":"Esta vulnerabilidad permite a los atacantes locales escalar privilegios en las instalaciones afectadas de Windscribe. Un atacante primero debe obtener la capacidad de ejecutar código con pocos privilegios en el sistema de destino para poder explotar esta vulnerabilidad. La falla específica existe dentro de la configuración de OpenSSL. El producto carga un archivo de configuración OpenSSL desde una ubicación no segura. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto de SYSTEM. Era ZDI-CAN-16859."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Windscribe","product":"Windscribe","versions":[{"version":"2.3 Build 16","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-01T13:49:16.947318Z","id":"CVE-2022-41141","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:windscribe:windscribe:2.3.16:*:*:*:*:windows:*:*","matchCriteriaId":"994B392A-99FD-46DE-BEB1-38D277CA0697"}]}]}],"references":[{"url":"https://windscribe.com/changelog/windows","source":"zdi-disclosures@trendmicro.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-1300/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://windscribe.com/changelog/windows","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-1300/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2022-4304","sourceIdentifier":"openssl-security@openssl.org","published":"2023-02-08T20:15:23.887","lastModified":"2026-10-14T15:16:59.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.0.0","lessThan":"3.0.8","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1t","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zg","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SCALANCE W1750D (JP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.10.0.9","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1750D (ROW)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.10.0.9","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1750D (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.10.0.9","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-06T15:57:19.589862Z","id":"CVE-2022-4304","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zg","matchCriteriaId":"70985D55-A574-4151-B451-4D500CBFC29A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1t","matchCriteriaId":"DE0061D6-8F81-45D3-B254-82A94915FD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.8","matchCriteriaId":"A6DC5D88-4E99-48F2-8892-610ACA9B5B86"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:endpoint_security:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.40","matchCriteriaId":"166DF690-041D-4585-A9DA-A6CC72A6A7F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:sslvpn:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.1","matchCriteriaId":"DA7E0DD2-D62E-4735-A2C9-47C463BE4AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*","versionStartIncluding":"2.7.0","versionEndExcluding":"2.7.11","matchCriteriaId":"27B77023-4983-4D33-9824-A120A5ED31BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*","versionStartIncluding":"2.8.0","versionEndExcluding":"3.7.34","matchCriteriaId":"8BD398C8-BC0B-4ED5-B71A-B9C6D8F63659"},{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*","versionStartIncluding":"3.8.0","versionEndExcluding":"3.11.22","matchCriteriaId":"31B59634-B59C-4391-96D3-200A86A6CE3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.3.16","matchCriteriaId":"F7794B42-8235-4C75-866F-5D0A405F0989"},{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.6.3","matchCriteriaId":"C8A23A5D-928A-4225-9C93-31E5DFE215A7"}]}]}],"references":[{"url":"https://security.gentoo.org/glsa/202402-08","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20230207.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230207.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-203374.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-264814.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-337522.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-561322.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-625862.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-699386.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-879734.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-943925.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2022-4450","sourceIdentifier":"openssl-security@openssl.org","published":"2023-02-08T20:15:23.973","lastModified":"2026-10-14T15:17:00.197","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and\ndecodes the \"name\" (e.g. \"CERTIFICATE\"), any header data and the payload data.\nIf the function succeeds then the \"name_out\", \"header\" and \"data\" arguments are\npopulated with pointers to buffers containing the relevant decoded data. The\ncaller is responsible for freeing those buffers. It is possible to construct a\nPEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex()\nwill return a failure code but will populate the header argument with a pointer\nto a buffer that has already been freed. If the caller also frees this buffer\nthen a double free will occur. This will most likely lead to a crash. This\ncould be exploited by an attacker who has the ability to supply malicious PEM\nfiles for parsing to achieve a denial of service attack.\n\nThe functions PEM_read_bio() and PEM_read() are simple wrappers around\nPEM_read_bio_ex() and therefore these functions are also directly affected.\n\nThese functions are also called indirectly by a number of other OpenSSL\nfunctions including PEM_X509_INFO_read_bio_ex() and\nSSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal\nuses of these functions are not vulnerable because the caller does not free the\nheader argument if PEM_read_bio_ex() returns a failure code. These locations\ninclude the PEM_read_bio_TYPE() functions as well as the decoders introduced in\nOpenSSL 3.0.\n\nThe OpenSSL asn1parse command line application is also impacted by this issue."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.0.0","lessThan":"3.0.8","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1t","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SCALANCE W1750D (JP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.10.0.9","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1750D (ROW)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.10.0.9","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1750D (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.10.0.9","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:26:38.705489Z","id":"CVE-2022-4450","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-415"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1t","matchCriteriaId":"DE0061D6-8F81-45D3-B254-82A94915FD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.8","matchCriteriaId":"A6DC5D88-4E99-48F2-8892-610ACA9B5B86"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.3.16","matchCriteriaId":"F7794B42-8235-4C75-866F-5D0A405F0989"},{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.6.3","matchCriteriaId":"C8A23A5D-928A-4225-9C93-31E5DFE215A7"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83","source":"openssl-security@openssl.org","tags":["Patch","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b","source":"openssl-security@openssl.org","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/202402-08","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20230207.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230207.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-203374.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-337522.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-561322.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-625862.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-699386.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-879734.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-943925.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2023-0215","sourceIdentifier":"openssl-security@openssl.org","published":"2023-02-08T20:15:24.107","lastModified":"2026-10-14T19:16:57.987","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.0.0","lessThan":"3.0.8","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1t","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zg","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SCALANCE W1750D (JP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.10.0.9","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1750D (ROW)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.10.0.9","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1750D (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.10.0.9","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:26:40.603939Z","id":"CVE-2023-0215","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zg","matchCriteriaId":"70985D55-A574-4151-B451-4D500CBFC29A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1t","matchCriteriaId":"DE0061D6-8F81-45D3-B254-82A94915FD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.8","matchCriteriaId":"A6DC5D88-4E99-48F2-8892-610ACA9B5B86"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_management_center:*:*:*:*:*:*:*:*","versionEndExcluding":"3.3.3","matchCriteriaId":"62A933C5-C56E-485C-AD49-3B6A2C329131"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd","source":"openssl-security@openssl.org","tags":["Patch","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb","source":"openssl-security@openssl.org","tags":["Patch","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344","source":"openssl-security@openssl.org","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/202402-08","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20230427-0007/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230427-0009/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20230207.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20230427-0007/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230427-0009/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230207.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-203374.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-337522.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-561322.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-625862.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-879734.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-943925.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2023-0216","sourceIdentifier":"openssl-security@openssl.org","published":"2023-02-08T20:15:24.160","lastModified":"2026-06-17T05:25:02.767","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An invalid pointer dereference on read can be triggered when an\napplication tries to load malformed PKCS7 data with the\nd2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.\n\nThe result of the dereference is an application crash which could\nlead to a denial of service attack. The TLS implementation in OpenSSL\ndoes not call this function however third party applications might\ncall these functions on untrusted data."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.0.0","lessThan":"3.0.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:26:43.338536Z","id":"CVE-2023-0216","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.0.7","matchCriteriaId":"26EF8A48-B8E5-4D4D-8054-445D65171EAC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_management_center:*:*:*:*:*:*:*:*","versionEndExcluding":"3.3.3","matchCriteriaId":"62A933C5-C56E-485C-AD49-3B6A2C329131"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6","source":"openssl-security@openssl.org","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/202402-08","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20230207.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=934a04f0e775309cadbef0aa6b9692e1b12a76c6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230207.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-0217","sourceIdentifier":"openssl-security@openssl.org","published":"2023-02-08T20:15:24.213","lastModified":"2026-06-17T05:25:02.927","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An invalid pointer dereference on read can be triggered when an\napplication tries to check a malformed DSA public key by the\nEVP_PKEY_public_check() function. This will most likely lead\nto an application crash. This function can be called on public\nkeys supplied from untrusted sources which could allow an attacker\nto cause a denial of service attack.\n\nThe TLS implementation in OpenSSL does not call this function\nbut applications might call the function if there are additional\nsecurity requirements imposed by standards such as FIPS 140-3."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.0.0","lessThan":"3.0.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:26:50.208671Z","id":"CVE-2023-0217","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.0.7","matchCriteriaId":"26EF8A48-B8E5-4D4D-8054-445D65171EAC"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20230207.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230207.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-0286","sourceIdentifier":"openssl-security@openssl.org","published":"2023-02-08T20:15:24.267","lastModified":"2026-10-14T20:17:22.450","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.0.0","lessThan":"3.0.8","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1t","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zg","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"BFCClient","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.17","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1750D (JP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.10.0.9","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1750D (ROW)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.10.0.9","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE W1750D (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.10.0.9","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.2},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-06T15:57:22.031399Z","id":"CVE-2023-0286","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-843"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-843"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zg","matchCriteriaId":"70985D55-A574-4151-B451-4D500CBFC29A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1t","matchCriteriaId":"DE0061D6-8F81-45D3-B254-82A94915FD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.8","matchCriteriaId":"A6DC5D88-4E99-48F2-8892-610ACA9B5B86"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_management_center:*:*:*:*:*:*:*:*","versionEndExcluding":"3.3.3","matchCriteriaId":"62A933C5-C56E-485C-AD49-3B6A2C329131"},{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*","versionStartIncluding":"2.7.0","versionEndExcluding":"2.7.11","matchCriteriaId":"27B77023-4983-4D33-9824-A120A5ED31BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*","versionStartIncluding":"2.8.0","versionEndExcluding":"3.7.34","matchCriteriaId":"8BD398C8-BC0B-4ED5-B71A-B9C6D8F63659"},{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*","versionStartIncluding":"3.8.0","versionEndExcluding":"3.11.22","matchCriteriaId":"31B59634-B59C-4391-96D3-200A86A6CE3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.3.16","matchCriteriaId":"F7794B42-8235-4C75-866F-5D0A405F0989"},{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0","versionEndExcluding":"4.6.3","matchCriteriaId":"C8A23A5D-928A-4225-9C93-31E5DFE215A7"}]}]}],"references":[{"url":"https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9","source":"openssl-security@openssl.org","tags":["Patch","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658","source":"openssl-security@openssl.org","tags":["Patch","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d","source":"openssl-security@openssl.org","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/202402-08","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20230207.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230207.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-028723.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-203374.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-264815.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-337522.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-455250.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-561322.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-625862.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-879734.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-943925.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2023-0401","sourceIdentifier":"openssl-security@openssl.org","published":"2023-02-08T20:15:24.323","lastModified":"2026-06-17T05:25:27.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A NULL pointer can be dereferenced when signatures are being\nverified on PKCS7 signed or signedAndEnveloped data. In case the hash\nalgorithm used for the signature is known to the OpenSSL library but\nthe implementation of the hash algorithm is not available the digest\ninitialization will fail. There is a missing check for the return\nvalue from the initialization function which later leads to invalid\nusage of the digest API most likely leading to a crash.\n\nThe unavailability of an algorithm can be caused by using FIPS\nenabled configuration of providers or more commonly by not loading\nthe legacy provider.\n\nPKCS7 data is processed by the SMIME library calls and also by the\ntime stamp (TS) library calls. The TLS implementation in OpenSSL does\nnot call these functions however third party applications would be\naffected if they call these functions to verify signatures on untrusted\ndata."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.0.0","lessThan":"3.0.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:26:52.071727Z","id":"CVE-2023-0401","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.0.7","matchCriteriaId":"26EF8A48-B8E5-4D4D-8054-445D65171EAC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stormshield:stormshield_management_center:*:*:*:*:*:*:*:*","versionEndExcluding":"3.3.3","matchCriteriaId":"62A933C5-C56E-485C-AD49-3B6A2C329131"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674","source":"openssl-security@openssl.org","tags":["Patch","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/202402-08","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20230207.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230207.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-23919","sourceIdentifier":"support@hackerone.com","published":"2023-02-23T20:15:13.977","lastModified":"2026-10-24T13:10:00.147","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread. This in turn could be used to cause a denial of service."},{"lang":"es","value":"Una vulnerabilidad criptográfica existe en Node.js anterior a 19.2.0, anterior a 18.14.1, anterior a 16.19.1, anterior a 14.21.3 que en algunos casos no limpia la pila de errores de OpenSSL después de operaciones que pueden establecerla. Esto puede llevar a errores de falso positivo durante operaciones criptográficas subsiguientes que se ejecutan en el mismo hilo. Esto a su vez podría usarse para causar una denegación de servicio."}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"NodeJS","product":"Node","defaultStatus":"unaffected","versions":[{"version":"4.0","lessThan":"4.*","versionType":"semver","status":"affected"},{"version":"5.0","lessThan":"5.*","versionType":"semver","status":"affected"},{"version":"6.0","lessThan":"6.*","versionType":"semver","status":"affected"},{"version":"7.0","lessThan":"7.*","versionType":"semver","status":"affected"},{"version":"8.0","lessThan":"8.*","versionType":"semver","status":"affected"},{"version":"9.0","lessThan":"9.*","versionType":"semver","status":"affected"},{"version":"10.0","lessThan":"10.*","versionType":"semver","status":"affected"},{"version":"11.0","lessThan":"11.*","versionType":"semver","status":"affected"},{"version":"12.0","lessThan":"12.*","versionType":"semver","status":"affected"},{"version":"13.0","lessThan":"13.*","versionType":"semver","status":"affected"},{"version":"14.0","lessThan":"14.21.3","versionType":"semver","status":"affected"},{"version":"15.0","lessThan":"15.*","versionType":"semver","status":"affected"},{"version":"16.0","lessThan":"16.19.1","versionType":"semver","status":"affected"},{"version":"17.0","lessThan":"17.*","versionType":"semver","status":"affected"},{"version":"18.0","lessThan":"18.14.1","versionType":"semver","status":"affected"},{"version":"19.0","lessThan":"19.2.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-12T14:26:46.934403Z","id":"CVE-2023-23919","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"support@hackerone.com","type":"Secondary","description":[{"lang":"en","value":"CWE-310"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.14.0","matchCriteriaId":"428DCD7B-6F66-4F18-B780-5BD80143D482"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"14.0.0","versionEndExcluding":"14.21.3","matchCriteriaId":"DA48F3CE-68BC-43F1-9428-A9F928420081"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"16.0.0","versionEndIncluding":"16.12.0","matchCriteriaId":"1D1D0CEC-62E5-4368-B8F2-1DA5DD0B88FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"16.0.0","versionEndExcluding":"16.19.1","matchCriteriaId":"6E9FAEC6-2D3A-4CBE-859F-11BCECC4F724"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"18.0.0","versionEndIncluding":"18.11.0","matchCriteriaId":"33DB62F6-9D8D-42F8-A75E-82DA091C02BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*","versionStartIncluding":"18.0.0","versionEndExcluding":"18.14.1","matchCriteriaId":"80500AD0-17C2-4698-AE03-1C6782FD38B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"19.0.0","versionEndExcluding":"19.2.0","matchCriteriaId":"57BCF42B-D5BC-433A-A4BA-E3014E275FA7"}]}]}],"references":[{"url":"https://hackerone.com/reports/1808596","source":"support@hackerone.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/","source":"support@hackerone.com","tags":["Patch","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230316-0008/","source":"support@hackerone.com"},{"url":"https://hackerone.com/reports/1808596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230316-0008/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2023-26490","sourceIdentifier":"security-advisories@github.com","published":"2023-03-04T00:15:15.647","lastModified":"2026-06-17T05:43:27.163","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"mailcow is a dockerized email package, with multiple containers linked in one bridged network. The Sync Job feature - which can be made available to standard users by assigning them the necessary permission - suffers from a shell command injection. A malicious user can abuse this vulnerability to obtain shell access to the Docker container running dovecot. The imapsync Perl script implements all the necessary functionality for this feature, including the XOAUTH2 authentication mechanism. This code path creates a shell command to call openssl. However, since different parts of the specified user password are included without any validation, one can simply execute additional shell commands. Notably, the default ACL for a newly-created mailcow account does not include the necessary permission. The Issue has been fixed within the 2023-03 Update (March 3rd 2023). As a temporary workaround the Syncjob ACL can be removed from all mailbox users, preventing from creating or changing existing Syncjobs."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"mailcow","product":"mailcow-dockerized","versions":[{"version":"< 2023-03","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-25T14:31:42.444112Z","id":"CVE-2023-26490","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailcow:mailcow\\:_dockerized:*:*:*:*:*:*:*:*","versionEndExcluding":"2023-03","matchCriteriaId":"5D365716-4310-4BBC-9A5B-73276F695F86"}]}]}],"references":[{"url":"https://github.com/mailcow/mailcow-dockerized/releases/tag/2023-03","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-3j2f-wf52-cjg7","source":"security-advisories@github.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/mailcow/mailcow-dockerized/releases/tag/2023-03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-3j2f-wf52-cjg7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-0464","sourceIdentifier":"openssl-security@openssl.org","published":"2023-03-22T17:15:13.130","lastModified":"2026-10-14T20:17:23.470","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.1.0","lessThan":"3.1.1","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.9","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1u","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zh","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"BFCClient","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.17","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:26:32.875761Z","id":"CVE-2023-0464","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zh","matchCriteriaId":"23F912E9-9126-4D16-8F77-BD41CED6774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1u","matchCriteriaId":"7D99C2F8-BE74-4912-8653-A2AEE387AAF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.9","matchCriteriaId":"4C637E94-F5EC-4D4B-836F-8C8219F1ECEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.1","matchCriteriaId":"68821BE0-7889-48B0-888D-CEC8BB9BDEA9"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e","source":"openssl-security@openssl.org","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"openssl-security@openssl.org"},{"url":"https://www.couchbase.com/alerts/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2023/dsa-5417","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20230322.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20230406-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.couchbase.com/alerts/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2023/dsa-5417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230322.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-028723.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-077170.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-337522.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-341067.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-625862.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-879734.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2023-0465","sourceIdentifier":"openssl-security@openssl.org","published":"2023-03-28T15:15:06.820","lastModified":"2026-10-14T20:17:23.747","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Applications that use a non-default option when verifying certificates may be\nvulnerable to an attack from a malicious CA to circumvent certain checks.\n\nInvalid certificate policies in leaf certificates are silently ignored by\nOpenSSL and other certificate policy checks are skipped for that certificate.\nA malicious CA could use this to deliberately assert invalid certificate policies\nin order to circumvent policy checking on the certificate altogether.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.1.0","lessThan":"3.1.1","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.9","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1u","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zh","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-18T20:12:09.117445Z","id":"CVE-2023-0465","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zh","matchCriteriaId":"23F912E9-9126-4D16-8F77-BD41CED6774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1u","matchCriteriaId":"7D99C2F8-BE74-4912-8653-A2AEE387AAF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.9","matchCriteriaId":"4C637E94-F5EC-4D4B-836F-8C8219F1ECEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.1","matchCriteriaId":"68821BE0-7889-48B0-888D-CEC8BB9BDEA9"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a","source":"openssl-security@openssl.org","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20230414-0001/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2023/dsa-5417","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20230328.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20230414-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2023/dsa-5417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230328.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-337522.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-341067.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-625862.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-879734.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2023-0466","sourceIdentifier":"openssl-security@openssl.org","published":"2023-03-28T15:15:06.880","lastModified":"2026-10-14T21:17:12.893","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The function X509_VERIFY_PARAM_add0_policy() is documented to\nimplicitly enable the certificate policy check when doing certificate\nverification. However the implementation of the function does not\nenable the check which allows certificates with invalid or incorrect\npolicies to pass the certificate verification.\n\nAs suddenly enabling the policy check could break existing deployments it was\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\nfunction.\n\nInstead the applications that require OpenSSL to perform certificate\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\nthe X509_V_FLAG_POLICY_CHECK flag argument.\n\nCertificate policy checks are disabled by default in OpenSSL and are not\ncommonly used by applications."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.1.0","lessThan":"3.1.1","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.9","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1u","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zh","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-19T17:11:17.280968Z","id":"CVE-2023-0466","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zh","matchCriteriaId":"23F912E9-9126-4D16-8F77-BD41CED6774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1u","matchCriteriaId":"7D99C2F8-BE74-4912-8653-A2AEE387AAF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.9","matchCriteriaId":"4C637E94-F5EC-4D4B-836F-8C8219F1ECEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.1","matchCriteriaId":"68821BE0-7889-48B0-888D-CEC8BB9BDEA9"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/4","source":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72","source":"openssl-security@openssl.org","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","source":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20230414-0001/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2023/dsa-5417","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20230328.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20230414-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2023/dsa-5417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230328.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-337522.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-341067.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-625862.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-879734.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2022-43507","sourceIdentifier":"secure@intel.com","published":"2023-05-10T14:15:24.400","lastModified":"2026-06-17T05:06:43.503","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable escalation of privilege via network access."}],"affected":[{"source":"secure@intel.com","affectedData":[{"vendor":"n/a","product":"Intel(R) QAT Engine for OpenSSL","defaultStatus":"unaffected","versions":[{"version":"before version 0.6.16","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"secure@intel.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-27T17:27:06.528395Z","id":"CVE-2022-43507","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secure@intel.com","type":"Secondary","description":[{"lang":"en","value":"CWE-92"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intel:quickassist_technology_engine:*:*:*:*:*:*:*:*","versionEndExcluding":"0.6.16","matchCriteriaId":"E4479CF3-0C39-439C-A3C1-9F11A656F9C4"}]}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00798.html","source":"secure@intel.com","tags":["Vendor Advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00798.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-2650","sourceIdentifier":"openssl-security@openssl.org","published":"2023-05-30T14:15:09.683","lastModified":"2026-10-14T21:17:15.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.1.1","lessThan":"3.1.1","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.9","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1u","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zh","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-06T15:55:48.363375Z","id":"CVE-2023-2650","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-770"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zh","matchCriteriaId":"23F912E9-9126-4D16-8F77-BD41CED6774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1u","matchCriteriaId":"7D99C2F8-BE74-4912-8653-A2AEE387AAF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.9","matchCriteriaId":"4C637E94-F5EC-4D4B-836F-8C8219F1ECEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.1","matchCriteriaId":"68821BE0-7889-48B0-888D-CEC8BB9BDEA9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6FEEC2-9F11-4643-8827-749718254FED"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2023/05/30/1","source":"openssl-security@openssl.org","tags":["Mailing List"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c","source":"openssl-security@openssl.org","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","source":"openssl-security@openssl.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202402-08","source":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20230703-0001/","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20231027-0009/","source":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2023/dsa-5417","source":"openssl-security@openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20230530.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/05/30/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20230703-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20231027-0009/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2023/dsa-5417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/news/secadv/20230530.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-699386.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-943925.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2023-35784","sourceIdentifier":"cve@mitre.org","published":"2023-06-16T20:15:09.493","lastModified":"2026-06-17T06:05:12.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x before 3.7.3. NOTE: OpenSSL is not affected."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-17T17:05:14.971673Z","id":"CVE-2023-35784","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-415"},{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:libressl:*:*:*:*:*:*:*:*","versionEndExcluding":"3.6.3","matchCriteriaId":"784B0777-194D-4E4A-874F-198BD201B508"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:libressl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.7.0","versionEndExcluding":"3.7.3","matchCriteriaId":"0E68DCDD-212C-4EF0-AF5D-23CD66073680"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:7.2:*:*:*:*:*:*:*","matchCriteriaId":"6E6EC6AC-E2DE-4166-A762-AB6A88DF1C1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:7.3:*:*:*:*:*:*:*","matchCriteriaId":"3C8A4344-6ABE-4626-ADA4-3FA91F8D76C7"}]}]}],"references":[{"url":"https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.3-relnotes.txt","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.7.3-relnotes.txt","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/026_ssl.patch.sig","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/004_ssl.patch.sig","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://github.com/libressl/openbsd/commit/e42d8f4b21a8a498e2eabbffe4c7b7d4ef7cec54","source":"cve@mitre.org"},{"url":"https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.3-relnotes.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.7.3-relnotes.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/026_ssl.patch.sig","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/004_ssl.patch.sig","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/libressl/openbsd/commit/e42d8f4b21a8a498e2eabbffe4c7b7d4ef7cec54","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2023-30586","sourceIdentifier":"support@hackerone.com","published":"2023-07-01T00:15:10.247","lastModified":"2026-06-17T05:55:05.053","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL engines when the experimental permission model is enabled, which can bypass and/or disable the permission model. The attack complexity is high. However, the crypto.setEngine() API can be used to bypass the permission model when called with a compatible OpenSSL engine. The OpenSSL engine can, for example, disable the permission model in the host process by manipulating the process's stack memory to locate the permission model Permission::enabled_ in the host process's heap memory. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js."}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"NodeJS","product":"Node","defaultStatus":"unaffected","versions":[{"version":"4.0","lessThan":"4.*","versionType":"semver","status":"affected"},{"version":"5.0","lessThan":"5.*","versionType":"semver","status":"affected"},{"version":"6.0","lessThan":"6.*","versionType":"semver","status":"affected"},{"version":"7.0","lessThan":"7.*","versionType":"semver","status":"affected"},{"version":"8.0","lessThan":"8.*","versionType":"semver","status":"affected"},{"version":"9.0","lessThan":"9.*","versionType":"semver","status":"affected"},{"version":"10.0","lessThan":"10.*","versionType":"semver","status":"affected"},{"version":"11.0","lessThan":"11.*","versionType":"semver","status":"affected"},{"version":"12.0","lessThan":"12.*","versionType":"semver","status":"affected"},{"version":"13.0","lessThan":"13.*","versionType":"semver","status":"affected"},{"version":"14.0","lessThan":"14.*","versionType":"semver","status":"affected"},{"version":"15.0","lessThan":"15.*","versionType":"semver","status":"affected"},{"version":"17.0","lessThan":"17.*","versionType":"semver","status":"affected"},{"version":"19.0","lessThan":"19.*","versionType":"semver","status":"affected"},{"version":"20.0","lessThan":"20.3.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-27T18:27:16.523763Z","id":"CVE-2023-30586","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-862"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"20.0.0","versionEndExcluding":"20.3.1","matchCriteriaId":"220A3D52-0B69-438A-B042-F19694CC63F1"}]}]}],"references":[{"url":"https://hackerone.com/reports/1954535","source":"support@hackerone.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230803-0008/","source":"support@hackerone.com","tags":["Third Party Advisory"]},{"url":"https://hackerone.com/reports/1954535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230803-0008/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-2975","sourceIdentifier":"openssl-security@openssl.org","published":"2023-07-14T12:15:09.023","lastModified":"2026-06-17T05:53:55.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: The AES-SIV cipher implementation contains a bug that causes\nit to ignore empty associated data entries which are unauthenticated as\na consequence.\n\nImpact summary: Applications that use the AES-SIV algorithm and want to\nauthenticate empty data entries as associated data can be misled by removing,\nadding or reordering such empty entries as these are ignored by the OpenSSL\nimplementation. We are currently unaware of any such applications.\n\nThe AES-SIV algorithm allows for authentication of multiple associated\ndata entries along with the encryption. To authenticate empty data the\napplication has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with\nNULL pointer as the output buffer and 0 as the input buffer length.\nThe AES-SIV implementation in OpenSSL just returns success for such a call\ninstead of performing the associated data authentication operation.\nThe empty data thus will not be authenticated.\n\nAs this issue does not affect non-empty associated data authentication and\nwe expect it to be rare for an application to use empty associated data\nentries this is qualified as Low severity issue."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.1.0","lessThan":"3.1.2","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.10","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:26:23.638671Z","id":"CVE-2023-2975","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-354"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.0.9","matchCriteriaId":"45FCBAF4-984A-4A86-ACE3-44AA47BD1A49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndIncluding":"3.1.1","matchCriteriaId":"2B459D2F-ABCF-4C74-ABB6-01F8C836E348"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:management_services_for_element_software_and_netapp_hci:-:*:*:*:*:*:*:*","matchCriteriaId":"FDAC85F0-93AF-4BE3-AE1A-8ADAF1CDF9AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*","matchCriteriaId":"E7CF3019-975D-40BB-A8A4-894E62BD3797"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://www.openssl.org/news/secadv/20230714.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/07/15/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2023/07/19/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=00e2f5eea29994d19293ec4e8c8775ba73678598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a83f0c958811f07e0d11dfc6b5a6a98edfd5bdc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20230725-0004/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230714.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-3446","sourceIdentifier":"openssl-security@openssl.org","published":"2023-07-19T12:15:10.003","lastModified":"2026-10-14T21:17:16.863","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.1.0","lessThan":"3.1.2","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.10","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1v","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zi","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIDIS Prime","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0.700","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:26:22.087194Z","id":"CVE-2023-3446","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-606"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-1333"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:-:*:*:*:*:*:*","matchCriteriaId":"CF0E6EB1-D656-458E-82B6-8C1ABDC13CB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1:-:*:*:*:*:*:*","matchCriteriaId":"A8C84061-63BE-49F6-B2F0-D96847E755E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.0.0:-:*:*:*:*:*:*","matchCriteriaId":"07D64A21-359E-40B7-8636-7E76D7466263"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.1.0:-:*:*:*:*:*:*","matchCriteriaId":"0CAAEE49-4FD0-4162-B635-4488BEC5DDC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.1.1:-:*:*:*:*:*:*","matchCriteriaId":"69EAFE3B-C2C7-4092-92A8-529512438B06"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb","source":"openssl-security@openssl.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528","source":"openssl-security@openssl.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c","source":"openssl-security@openssl.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23","source":"openssl-security@openssl.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://www.openssl.org/news/secadv/20230719.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/07/19/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2023/07/19/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2023/07/19/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2023/07/31/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2024/05/16/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20230803-0011/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230719.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-099606.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-277137.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-341067.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-943925.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2023-28133","sourceIdentifier":"cve@checkpoint.com","published":"2023-07-23T10:15:09.577","lastModified":"2026-06-17T05:46:56.933","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration file"}],"affected":[{"source":"cve@checkpoint.com","affectedData":[{"vendor":"n/a","product":"Harmony Endpoint.","versions":[{"version":"E87.x before E81.31","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-24T15:52:41.369872Z","id":"CVE-2023-28133","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@checkpoint.com","type":"Secondary","description":[{"lang":"en","value":"CWE-732"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:endpoint_security:e87.30:*:*:*:*:windows:*:*","matchCriteriaId":"D5545C76-DD76-44DE-BC70-06B855CE8098"}]}]}],"references":[{"url":"https://support.checkpoint.com/results/sk/sk181276","source":"cve@checkpoint.com","tags":["Vendor Advisory"]},{"url":"https://support.checkpoint.com/results/sk/sk181276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-3817","sourceIdentifier":"openssl-security@openssl.org","published":"2023-07-31T16:15:10.497","lastModified":"2026-10-14T22:17:16.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the \"-check\" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.1.0","lessThan":"3.1.2","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.10","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1v","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zi","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:26:20.624850Z","id":"CVE-2023-3817","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-606"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-834"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.10","matchCriteriaId":"E327FF28-8035-4914-B7D9-F96780BD9C5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.2","matchCriteriaId":"9BA338C8-1C98-4928-9661-BC82501A8972"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:-:*:*:*:*:*:*","matchCriteriaId":"CF0E6EB1-D656-458E-82B6-8C1ABDC13CB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","matchCriteriaId":"18797BEE-417D-4959-9AAD-C5A7C051B524"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","matchCriteriaId":"6FAA3C31-BD9D-45A9-A502-837FECA6D479"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","matchCriteriaId":"6455A421-9956-4846-AC7C-3431E0D37D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*","matchCriteriaId":"FDF148A3-1AA7-4F27-85AB-414C609C626F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*","matchCriteriaId":"E15B749E-6808-4788-AE42-7A1587D8697E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2k:*:*:*:*:*:*:*","matchCriteriaId":"58F80C8D-BCA2-40AD-BD22-B70C7BE1B298"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2l:*:*:*:*:*:*:*","matchCriteriaId":"70B78EDF-6BB7-42C4-9423-9332C62C6E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2m:*:*:*:*:*:*:*","matchCriteriaId":"E2354F82-A01B-43D2-84F4-4E94B258E091"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2n:*:*:*:*:*:*:*","matchCriteriaId":"59AAE340-19BC-4879-AC48-9F4F338A3B61"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2o:*:*:*:*:*:*:*","matchCriteriaId":"6264EB97-9FBE-4DEB-A81D-EA0B2E4437FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2p:*:*:*:*:*:*:*","matchCriteriaId":"59B58D80-485A-4CBD-9220-D6FDBD6FEE65"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2q:*:*:*:*:*:*:*","matchCriteriaId":"9B1131CC-526D-45FF-ABEB-164100D0BE0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2r:*:*:*:*:*:*:*","matchCriteriaId":"0739C502-4EDB-4D08-B2B9-04FAB98AFE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2s:*:*:*:*:*:*:*","matchCriteriaId":"AB045D51-DAD7-44E1-BA80-4C90F0F4335F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2t:*:*:*:*:*:*:*","matchCriteriaId":"5A745BE4-2249-4251-8AD1-43F0F7EF2755"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2u:*:*:*:*:*:*:*","matchCriteriaId":"DAEB85A6-B9F9-4EC1-942F-7E17A3854600"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2v:*:*:*:*:*:*:*","matchCriteriaId":"7D6D42CF-82FC-4A6F-9C4C-6DBF9470CABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2w:*:*:*:*:*:*:*","matchCriteriaId":"A6029EAB-8DDE-4995-AFC8-4C17BDEC8DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2x:*:*:*:*:*:*:*","matchCriteriaId":"EF8EEF0A-623B-46A8-9C0D-F5EC490128DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2y:*:*:*:*:*:*:*","matchCriteriaId":"024263ED-A240-4447-8926-E9D1EF4792E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2za:*:*:*:*:*:*:*","matchCriteriaId":"EEAC4D67-2D2A-45EF-8693-1D90EEC818EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2zb:*:*:*:*:*:*:*","matchCriteriaId":"A6852B09-CC89-4F9C-8245-59AD2C797AC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2zc:*:*:*:*:*:*:*","matchCriteriaId":"3A7A844C-EB18-443B-8B33-86C98BFF683E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2zd:*:*:*:*:*:*:*","matchCriteriaId":"8538CCF3-19C0-4E55-B5F7-AC07A1D68E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2ze:*:*:*:*:*:*:*","matchCriteriaId":"3CCDDB86-9910-4251-91B0-D56EDE93BF49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2zf:*:*:*:*:*:*:*","matchCriteriaId":"96BA4105-67FF-43BD-A655-7F5741AD8F8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2zg:*:*:*:*:*:*:*","matchCriteriaId":"DC2EEB54-2A48-4DB7-B95C-4B5072B98858"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2zh:*:*:*:*:*:*:*","matchCriteriaId":"A32F8FD2-79D4-4349-95EF-8B2448993CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1:-:*:*:*:*:*:*","matchCriteriaId":"A8C84061-63BE-49F6-B2F0-D96847E755E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1:pre1:*:*:*:*:*:*","matchCriteriaId":"811DBBDB-4DD9-4440-A9EC-F97B161F1E1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1:pre2:*:*:*:*:*:*","matchCriteriaId":"8A5C2FE6-8BFB-4C73-83E9-0CF230D4B452"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1:pre3:*:*:*:*:*:*","matchCriteriaId":"230480C2-314E-4465-B09D-101DCC475E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1:pre4:*:*:*:*:*:*","matchCriteriaId":"5474A1A5-81F9-4B15-B145-C327EB098740"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1:pre5:*:*:*:*:*:*","matchCriteriaId":"7EEDDD3D-0598-4F1F-93CB-FAF6757BFF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1:pre6:*:*:*:*:*:*","matchCriteriaId":"ED226FB6-07FD-4713-BEFE-94456FA6F82F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1:pre7:*:*:*:*:*:*","matchCriteriaId":"11AE7A76-811B-46D0-9173-BC5A48560F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1:pre8:*:*:*:*:*:*","matchCriteriaId":"A4955261-CCEB-472B-9535-98B0CE04A321"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1:pre9:*:*:*:*:*:*","matchCriteriaId":"C36FAE41-0B70-4049-9AFA-8F762EF4FB00"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1a:*:*:*:*:*:*:*","matchCriteriaId":"42649AB8-1443-4036-9873-160D913BAD68"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1b:*:*:*:*:*:*:*","matchCriteriaId":"8AE4A4BC-31BE-4EC5-907C-295D98484ABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1c:*:*:*:*:*:*:*","matchCriteriaId":"D8A852AB-AE4C-4794-BE45-D49EECA9D440"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1d:*:*:*:*:*:*:*","matchCriteriaId":"6B34CE8C-FF32-433B-8527-CA04E7835AC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1e:*:*:*:*:*:*:*","matchCriteriaId":"F73E774D-C6EB-4776-A847-3F331EC77204"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1f:*:*:*:*:*:*:*","matchCriteriaId":"BF6D1346-43CD-41DE-9021-A98157FED8B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1g:*:*:*:*:*:*:*","matchCriteriaId":"C7364FED-4719-4EF5-8ABB-D36CBD8BE402"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1h:*:*:*:*:*:*:*","matchCriteriaId":"14479639-DF33-4AB7-B781-791BF8DA8382"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1i:*:*:*:*:*:*:*","matchCriteriaId":"900C1008-F297-47FD-A1BD-11A3BEFF02E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1j:*:*:*:*:*:*:*","matchCriteriaId":"AD1A1441-D118-4557-A8AA-88B20D332ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1k:*:*:*:*:*:*:*","matchCriteriaId":"8AACE259-34C9-4100-8730-5BDA4B1B1A66"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1l:*:*:*:*:*:*:*","matchCriteriaId":"BAF15ABD-322D-413F-9707-C2A4508629D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1m:*:*:*:*:*:*:*","matchCriteriaId":"69FAF390-8141-4451-9D80-76155BD4EADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1n:*:*:*:*:*:*:*","matchCriteriaId":"0A54842A-332F-4092-ABE0-F3323541BE67"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1o:*:*:*:*:*:*:*","matchCriteriaId":"FB72FEE3-190B-4326-ACD0-F52110536526"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1p:*:*:*:*:*:*:*","matchCriteriaId":"1AF40BB0-0C57-4BCD-815F-A3FF4EB42D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1q:*:*:*:*:*:*:*","matchCriteriaId":"EA111F81-1347-4D7D-BA0F-88350174DAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1r:*:*:*:*:*:*:*","matchCriteriaId":"46E4334B-6203-49B1-83E6-381E6D12DCBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1s:*:*:*:*:*:*:*","matchCriteriaId":"B76E919B-5E08-4C04-80FF-5F9DBA244B71"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1t:*:*:*:*:*:*:*","matchCriteriaId":"6F1DE6C9-DCAF-4896-912D-443A32B918F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.1.1u:*:*:*:*:*:*:*","matchCriteriaId":"C5C8A0C3-BAAF-43D7-B782-5EA17539D7EF"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644","source":"openssl-security@openssl.org","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://www.openssl.org/news/secadv/20230731.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2023/Jul/43","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2023/07/31/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2023/11/06/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20230818-0014/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20231027-0008/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230731.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-099606.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-943925.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2023-39441","sourceIdentifier":"security@apache.org","published":"2023-08-23T16:15:09.617","lastModified":"2026-06-17T06:12:20.513","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, and Apache Airflow before 2.7.0 are affected by the Validation of OpenSSL Certificate vulnerability.\n\nThe default SSL context with SSL library did not check a server's X.509 certificate.  Instead, the code accepted any certificate, which could result in the disclosure of mail server credentials or mail contents when the client connects to an attacker in a MITM position.\n\nUsers are strongly advised to upgrade to Apache Airflow version 2.7.0 or newer, Apache Airflow IMAP Provider version 3.3.0 or newer, and Apache Airflow SMTP Provider version 1.3.0 or newer to mitigate the risk associated with this vulnerability"},{"lang":"es","value":"Apache Airflow SMTP Provider antes de 1.3.0, Apache Airflow IMAP Provider antes de 3.3.0, y Apache Airflow antes de 2.7.0 están afectados por la vulnerabilidad Validation of OpenSSL Certificate. El contexto SSL por defecto con la librería SSL no comprobaba el certificado X.509 de un servidor.  En su lugar, el código aceptaba cualquier certificado, lo que podía dar lugar a la revelación de credenciales del servidor de correo o del contenido del correo cuando el cliente se conectaba a un atacante en posición MITM. Se recomienda encarecidamente a los usuarios que actualicen a Apache Airflow versión 2.7.0 o posterior, Apache Airflow IMAP Provider versión 3.3.0 o posterior y Apache Airflow SMTP Provider versión 1.3.0 o posterior para mitigar el riesgo asociado a esta vulnerabilidad."}],"affected":[{"source":"security@apache.org","affectedData":[{"vendor":"Apache Software Foundation","product":"Apache Airflow SMTP Provider","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"1.30","versionType":"semver","status":"affected"}]},{"vendor":"Apache Software Foundation","product":"Apache Airflow IMAP Provider","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"3.3.0","versionType":"semver","status":"affected"}]},{"vendor":"Apache Software Foundation","product":"Apache Airflow","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"2.7.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-27T20:31:29.615848Z","id":"CVE-2023-39441","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@apache.org","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*","versionEndExcluding":"2.7.0","matchCriteriaId":"4E21F5BA-D44C-4FE5-9211-E45B8BEE1DA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apache-airflow-providers-imap:*:*:*:*:*:*:*:*","versionEndExcluding":"3.3.0","matchCriteriaId":"E1601545-5019-45D5-A049-90ED0536E570"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:apache-airflow-providers-smtp:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3.0","matchCriteriaId":"97C37855-EE84-4FB9-8DD2-C2A702A0A5CD"}]}]}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2023/08/23/2","source":"security@apache.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://github.com/apache/airflow/pull/33070","source":"security@apache.org","tags":["Patch"]},{"url":"https://github.com/apache/airflow/pull/33075","source":"security@apache.org","tags":["Patch"]},{"url":"https://github.com/apache/airflow/pull/33108","source":"security@apache.org","tags":["Patch"]},{"url":"https://lists.apache.org/thread/xzp4wgjg2b1o6ylk2595df8bstlbo1lb","source":"security@apache.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/08/23/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://github.com/apache/airflow/pull/33070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/apache/airflow/pull/33075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/apache/airflow/pull/33108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://lists.apache.org/thread/xzp4wgjg2b1o6ylk2595df8bstlbo1lb","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-40596","sourceIdentifier":"prodsec@splunk.com","published":"2023-08-30T17:15:10.103","lastModified":"2026-06-17T06:18:38.267","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In Splunk Enterprise versions earlier than 8.2.12, 9.0.6, and 9.1.1, a dynamic link library (DLL) that ships with Splunk Enterprise references an insecure path for the OPENSSLDIR build definition. An attacker can abuse this reference and subsequently install malicious code to achieve privilege escalation on the Windows machine."},{"lang":"es","value":"En versiones de Splunk Enterprise anteriores a la 8.2.12, 9.0.6 y 9.1.1, una biblioteca de enlace dinámico (DLL) que se distribuye con Splunk Enterprise hace referencia a una ruta insegura para la definición de compilación OPENSSLDIR. Un atacante puede abusar de esta referencia y posteriormente instalar código malicioso para lograr la escalada de privilegios en la máquina Windows."}],"affected":[{"source":"prodsec@splunk.com","affectedData":[{"vendor":"Splunk","product":"Splunk Enterprise","versions":[{"version":"8.2","lessThan":"8.2.12","versionType":"custom","status":"affected"},{"version":"9.0","lessThan":"9.0.6","versionType":"custom","status":"affected"},{"version":"9.1","lessThan":"9.1.1","versionType":"custom","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"splunk","product":"splunk","defaultStatus":"unknown","cpes":["cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*"],"versions":[{"version":"8.2","lessThan":"8.2.12","versionType":"semver","status":"affected"},{"version":"9.0","lessThan":"9.0.6","versionType":"semver","status":"affected"},{"version":"9.1","lessThan":"9.1.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"prodsec@splunk.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-20T19:34:18.026500Z","id":"CVE-2023-40596","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"prodsec@splunk.com","type":"Secondary","description":[{"lang":"en","value":"CWE-665"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.2.12","matchCriteriaId":"21F6F824-393F-424F-85DF-CD3FCB40452F"},{"vulnerable":true,"criteria":"cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.0.6","matchCriteriaId":"74A23E71-6A34-48A5-8087-B626BED870E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:splunk:splunk:9.1.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"A4F2BC82-AD4C-4D80-8200-C2371E7C04F1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://advisory.splunk.com/advisories/SVD-2023-0805","source":"prodsec@splunk.com","tags":["Vendor Advisory"]},{"url":"https://advisory.splunk.com/advisories/SVD-2023-0805","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-4807","sourceIdentifier":"openssl-security@openssl.org","published":"2023-09-08T12:15:08.043","lastModified":"2026-10-14T22:17:17.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications on the\nWindows 64 platform when running on newer X86_64 processors supporting the\nAVX512-IFMA instructions.\n\nImpact summary: If in an application that uses the OpenSSL library an attacker\ncan influence whether the POLY1305 MAC algorithm is used, the application\nstate might be corrupted with various application dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL does\nnot save the contents of non-volatile XMM registers on Windows 64 platform\nwhen calculating the MAC of data larger than 64 bytes. Before returning to\nthe caller all the XMM registers are set to zero rather than restoring their\nprevious content. The vulnerable code is used only on newer x86_64 processors\nsupporting the AVX512-IFMA instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However given the contents of the registers are just zeroized so\nthe attacker cannot put arbitrary values inside, the most likely consequence,\nif any, would be an incorrect result of some application dependent\ncalculations or a crash leading to a denial of service.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3 and a malicious client can influence whether this AEAD\ncipher is used by the server. This implies that server applications using\nOpenSSL can be potentially impacted. However we are currently not aware of\nany concrete application that would be affected by this issue therefore we\nconsider this a Low severity security issue.\n\nAs a workaround the AVX512-IFMA instructions support can be disabled at\nruntime by setting the environment variable OPENSSL_ia32cap:\n\n   OPENSSL_ia32cap=:~0x200000\n\nThe FIPS provider is not affected by this issue."},{"lang":"es","value":"Resumen del problema: la implementación POLY1305 MAC (código de autenticación de mensajes) contiene un error que podría dañar el estado interno de las aplicaciones en la plataforma Windows 64 cuando se ejecutan en procesadores X86_64 más nuevos que admiten las instrucciones AVX512-IFMA. Resumen del impacto: si en una aplicación que usa la librería OpenSSL un atacante puede influir en si se usa el algoritmo MAC POLY1305, el estado de la aplicación podría corromperse con varias consecuencias dependientes de la aplicación. La implementación POLY1305 MAC (código de autenticación de mensajes) en OpenSSL no guarda el contenido de los registros XMM no volátiles en la plataforma Windows 64 al calcular la MAC de datos de más de 64 bytes. Antes de regresar a la persona que llama, todos los registros XMM se establecen en cero en lugar de restaurar su contenido anterior. El código vulnerable se utiliza sólo en procesadores x86_64 más nuevos que admiten las instrucciones AVX512-IFMA. Las consecuencias de este tipo de corrupción del estado de la aplicación interna pueden ser diversas: desde ninguna consecuencia, si la aplicación que llama no depende en absoluto del contenido de los registros XMM no volátiles, hasta las peores consecuencias, donde el atacante podría obtener el control total de el proceso de solicitud. Sin embargo, dado que el contenido de los registros simplemente se pone a cero para que el atacante no pueda colocar valores arbitrarios en su interior, la consecuencia más probable, si la hubiera, sería un resultado incorrecto de algunos cálculos dependientes de la aplicación o una falla que provocaría una denegación de servicio. El algoritmo POLY1305 MAC se utiliza con mayor frecuencia como parte del algoritmo CHACHA20-POLY1305 AEAD (cifrado autenticado con datos asociados). El uso más común de este cifrado AEAD es con las versiones 1.2 y 1.3 del protocolo TLS y un cliente malicioso puede influir en si el servidor utiliza este cifrado AEAD. Esto implica que las aplicaciones de servidor que utilizan OpenSSL pueden verse potencialmente afectadas. Sin embargo, actualmente no conocemos ninguna aplicación concreta que pueda verse afectada por este problema, por lo que lo consideramos un problema de seguridad de gravedad Baja. Como workaround, el soporte de instrucciones AVX512-IFMA se puede desactivar en tiempo de ejecución configurando la variable de entorno OPENSSL_ia32cap: OPENSSL_ia32cap=:~0x200000 El proveedor FIPS no se ve afectado por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.1.0","lessThan":"3.1.3","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.11","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1w","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIDIS Prime","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0.700","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEC NMS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0 SP1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:27:06.574022Z","id":"CVE-2023-4807","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-440"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1w","matchCriteriaId":"AE28C377-98B8-48F3-9869-A5085F95D22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.11","matchCriteriaId":"F9CA5322-712C-46EC-85D4-82BBCD86A370"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.3","matchCriteriaId":"8CD493DA-9CA9-4D3C-A2C0-BE0A06D7E265"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=4bfac4471f53c4f74c8d81020beb938f92d84ca5","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6754de4a121ec7f261b16723180df6592cbb4508","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a632d534c73eeb3e3db8c7540d811194ef7c79ff","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://www.openssl.org/news/secadv/20230908.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=4bfac4471f53c4f74c8d81020beb938f92d84ca5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6754de4a121ec7f261b16723180df6592cbb4508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a632d534c73eeb3e3db8c7540d811194ef7c79ff","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://security.netapp.com/advisory/ntap-20230921-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230908.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-093430.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-277137.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-331112.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2023-5422","sourceIdentifier":"security@otrs.com","published":"2023-10-16T09:15:12.013","lastModified":"2026-06-17T06:48:33.470","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication. As the \nSSL_get_verify_result() function is not used the certificated is trusted always and it can not be ensured that the certificate \nsatisfies all necessary security requirements.\n\nThis could allow an \nattacker to use an invalid certificate to claim to be a trusted host, \nuse expired certificates, or conduct other attacks that could be \ndetected if the certificate is properly validated.\n\nThis issue affects OTRS: from 7.0.X before 7.0.47, from 8.0.X before 8.0.37; ((OTRS)) Community Edition: from 6.0.X through 6.0.34.\n\n"},{"lang":"es","value":"Las funciones para recuperar correos electrónicos a través de POP3 o IMAP, así como enviar correos electrónicos a través de SMTP, utilizan OpenSSL para comunicaciones basadas en SSL o TLS estáticas. Como no se utiliza la función SSL_get_verify_result(), el certificado siempre es confiable y no se puede garantizar que el certificado cumpla con todos los requisitos de seguridad necesarios. Esto podría permitir a un atacante utilizar un certificado no válido para afirmar que es un host confiable, utilizar certificados caducados o realizar otros ataques que podrían detectarse si el certificado se valida correctamente. Este problema afecta a OTRS: desde 7.0.X anterior a 7.0.47, desde 8.0.X anterior a 8.0.37; ((OTRS)) Community Edition: desde 6.0.X hasta 6.0.34."}],"affected":[{"source":"security@otrs.com","affectedData":[{"vendor":"OTRS AG","product":"OTRS","defaultStatus":"affected","modules":["E-Mail Backend"],"versions":[{"version":"7.0.x","lessThan":"7.0.47","versionType":"Patch","status":"affected"},{"version":"8.0.x","lessThan":"8.0.37","versionType":"Patch","status":"affected"}]},{"vendor":"OTRS AG","product":"((OTRS)) Community Edition","defaultStatus":"affected","modules":["E-Mail Backend"],"versions":[{"version":"6.0.x","lessThanOrEqual":"6.0.34","versionType":"All","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"otrs_ag","product":"otrs","defaultStatus":"unknown","cpes":["cpe:2.3:a:otrs_ag:otrs:*:*:*:*:*:*:*:*"],"versions":[{"version":"7.0.x","lessThan":"7.0.47","versionType":"custom","status":"affected"},{"version":"8.0.x","lessThan":"8.0.37","versionType":"custom","status":"affected"}]},{"vendor":"otrs_community_edition","product":"otrs_community_edition","defaultStatus":"unknown","cpes":["cpe:2.3:a:otrs_community_edition:otrs_community_edition:*:*:*:*:*:*:*:*"],"versions":[{"version":"6.0x","lessThan":"6.0.34","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@otrs.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.8},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-16T16:57:40.338711Z","id":"CVE-2023-5422","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@otrs.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:*:*:*:*:community:*:*:*","versionStartIncluding":"6.0.0","versionEndIncluding":"6.0.34","matchCriteriaId":"F933EBB8-2E51-4E24-BB9E-64FBE0FCBFDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.47","matchCriteriaId":"B1C07539-E637-4A14-97EE-9FE4CB60644F"},{"vulnerable":true,"criteria":"cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.37","matchCriteriaId":"400DD972-B06D-44C6-BD88-737BA162B3E1"}]}]}],"references":[{"url":"https://otrs.com/release-notes/otrs-security-advisory-2023-10/","source":"security@otrs.com","tags":["Vendor Advisory"]},{"url":"https://otrs.com/release-notes/otrs-security-advisory-2023-10/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-5363","sourceIdentifier":"openssl-security@openssl.org","published":"2023-10-25T18:17:43.613","lastModified":"2026-06-17T06:48:25.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A bug has been identified in the processing of key and\ninitialisation vector (IV) lengths.  This can lead to potential truncation\nor overruns during the initialisation of some symmetric ciphers.\n\nImpact summary: A truncation in the IV can result in non-uniqueness,\nwhich could result in loss of confidentiality for some cipher modes.\n\nWhen calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or\nEVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after\nthe key and IV have been established.  Any alterations to the key length,\nvia the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter,\nwithin the OSSL_PARAM array will not take effect as intended, potentially\ncausing truncation or overreading of these values.  The following ciphers\nand cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB.\n\nFor the CCM, GCM and OCB cipher modes, truncation of the IV can result in\nloss of confidentiality.  For example, when following NIST's SP 800-38D\nsection 8.2.1 guidance for constructing a deterministic IV for AES in\nGCM mode, truncation of the counter portion could lead to IV reuse.\n\nBoth truncations and overruns of the key and overruns of the IV will\nproduce incorrect results and could, in some cases, trigger a memory\nexception.  However, these issues are not currently assessed as security\ncritical.\n\nChanging the key and/or IV lengths is not considered to be a common operation\nand the vulnerable API was recently introduced. Furthermore it is likely that\napplication developers will have spotted this problem during testing since\ndecryption would fail unless both peers in the communication were similarly\nvulnerable. For these reasons we expect the probability of an application being\nvulnerable to this to be quite low. However if an application is vulnerable then\nthis issue is considered very serious. For these reasons we have assessed this\nissue as Moderate severity overall.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this because\nthe issue lies outside of the FIPS provider boundary.\n\nOpenSSL 3.1 and 3.0 are vulnerable to this issue."},{"lang":"es","value":"Resumen del problema: se ha identificado un error en el procesamiento de longitudes de clave y vector de inicialización (IV). Esto puede provocar posibles truncamientos o desbordamientos durante la inicialización de algunos cifrados simétricos. Resumen de impacto: un truncamiento en el IV puede dar como resultado una falta de unicidad, lo que podría resultar en la pérdida de confidencialidad para algunos modos de cifrado. Al llamar a EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or EVP_CipherInit_ex2(), la matriz OSSL_PARAM proporcionada se procesa después de que se hayan establecido la clave y el IV. Cualquier modificación en la longitud de la clave, a través del parámetro \"keylen\" o la longitud del IV, a través del parámetro \"ivlen\", dentro de la matriz OSSL_PARAM no tendrá efecto según lo previsto, lo que podría provocar el truncamiento o la sobrelectura de estos valores. Los siguientes cifrados y modos de cifrado se ven afectados: RC2, RC4, RC5, CCM, GCM y OCB. Para los modos de cifrado CCM, GCM y OCB, el truncamiento del IV puede provocar una pérdida de confidencialidad. Por ejemplo, al seguir la guía de la sección 8.2.1 SP 800-38D del NIST para construir un IV determinista para AES en modo GCM, el truncamiento de la parte del contador podría llevar a la reutilización del IV. Tanto los truncamientos como los desbordamientos de la clave y del IV producirán resultados incorrectos y, en algunos casos, podrían desencadenar una excepción de memoria. Sin embargo, actualmente estos problemas no se consideran críticos para la seguridad. Cambiar la clave y/o las longitudes de IV no se considera una operación común y la API vulnerable se introdujo recientemente. Además, es probable que los desarrolladores de aplicaciones hayan detectado este problema durante las pruebas, ya que el descifrado fallaría a menos que ambos interlocutores en la comunicación fueran igualmente vulnerables. Por estas razones, esperamos que la probabilidad de que una aplicación sea vulnerable a esto sea bastante baja. Sin embargo, si una aplicación es vulnerable, el problema se considera muy grave. Por estos motivos, hemos evaluado este problema como de gravedad moderada en general. La implementación de OpenSSL SSL/TLS no se ve afectada por este problema. Los proveedores FIPS OpenSSL 3.0 y 3.1 no se ven afectados por esto porque el problema se encuentra fuera de los límites del proveedor FIPS. OpenSSL 3.1 y 3.0 son vulnerables a este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.0.0","lessThan":"3.0.12","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThan":"3.1.4","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIDIS Prime","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0.700","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEC NMS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0 SP1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-03T19:15:36.625641Z","id":"CVE-2023-5363","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-684"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.12","matchCriteriaId":"2240B7FC-1779-4714-AA52-C4F4E2AB6FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.4","matchCriteriaId":"FB1AEA3A-8C1A-4A57-8932-DDCCB9DE798C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*","matchCriteriaId":"46D69DCC-AE4D-4EA5-861C-D60951444C6C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"6770B6C3-732E-4E22-BF1C-2D2FD610061C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h300s:*:*:*:*:*:*:*:*","matchCriteriaId":"A4F5761B-B747-4110-9849-B6D4C14B24A6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D0B4AD8A-F172-4558-AEC6-FF424BA2D912"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410s:*:*:*:*:*:*:*:*","matchCriteriaId":"D033CBC9-59FE-48D6-9D30-C4895FB957B8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"7FFF7106-ED78-49BA-9EC5-B889E3685D53"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h500s:*:*:*:*:*:*:*:*","matchCriteriaId":"09B76C01-3DA1-461D-98F2-4858AF542D84"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"56409CEC-5A1E-4450-AA42-641E459CC2AF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h700s:*:*:*:*:*:*:*:*","matchCriteriaId":"6D3E5A63-DA59-4582-9D38-26E9225B0BA0"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*","matchCriteriaId":"CDDF61B7-EC5C-467C-B710-B89F502CD04F"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d","source":"openssl-security@openssl.org","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee","source":"openssl-security@openssl.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.openssl.org/news/secadv/20231024.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/24/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20231027-0010/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240201-0003/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240201-0004/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20241108-0002/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2023/dsa-5532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20231024.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-093430.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-277137.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-331112.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2023-5678","sourceIdentifier":"openssl-security@openssl.org","published":"2023-11-06T16:15:42.670","lastModified":"2026-10-14T22:17:19.870","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."},{"lang":"es","value":"Resumen del problema: generar claves X9.42 DH excesivamente largas o comprobar claves o parámetros X9.42 DH excesivamente largos puede ser muy lento. Resumen de impacto: las aplicaciones que utilizan las funciones DH_generate_key() para generar una clave DH X9.42 pueden experimentar grandes retrasos. Del mismo modo, las aplicaciones que utilizan DH_check_pub_key(), DH_check_pub_key_ex() o EVP_PKEY_public_check() para comprobar una clave X9.42 DH o parámetros X9.42 DH pueden experimentar grandes retrasos. Cuando la clave o los parámetros que se están verificando se obtuvieron de una fuente que no es confiable, esto puede dar lugar a una Denegación de Servicio. Mientras que DH_check() realiza todas las comprobaciones necesarias (a partir de CVE-2023-3817), DH_check_pub_key() no realiza ninguna de estas comprobaciones y, por lo tanto, es vulnerable a parámetros P y Q excesivamente grandes. Del mismo modo, aunque DH_generate_key() realiza una verificación de una P excesivamente grande, no verifica una Q excesivamente grande. Una aplicación que llama a DH_generate_key() o DH_check_pub_key() y proporciona una clave o parámetros obtenidos de una fuente que no es de confianza podría ser vulnerable a un ataque de denegación de servicio. DH_generate_key() y DH_check_pub_key() también son llamados por otras funciones de OpenSSL. Una aplicación que llame a cualquiera de esas otras funciones también puede verse afectada. Las otras funciones afectadas por esto son DH_check_pub_key_ex(), EVP_PKEY_public_check() y EVP_PKEY_generate(). También son vulnerables la aplicación de línea de comandos OpenSSL pkey cuando se utiliza la opción \"-pubcheck\", así como la aplicación de línea de comandos OpenSSL genpkey. La implementación de OpenSSL SSL/TLS no se ve afectada por este problema. Los proveedores FIPS OpenSSL 3.0 y 3.1 no se ven afectados por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"1.0.2","lessThan":"1.0.2zj","versionType":"custom","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1x","versionType":"custom","status":"affected"},{"version":"3.0.0","lessThan":"3.0.13","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThan":"3.1.5","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XCM-/XRM-/XCH-/XRH-300 family","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SIDIS Prime","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0.700","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEC NMS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0 SP1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-02T19:42:37.122304Z","id":"CVE-2023-5678","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-606"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-754"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zj","matchCriteriaId":"E30B9424-68AA-4ED4-A1CB-3DA32A2350EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1x","matchCriteriaId":"93CF937D-2520-44AF-B40B-B41720BEAB36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.13","matchCriteriaId":"21346C7C-ED3A-43D4-BBCB-41D62F7ACBF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.5","matchCriteriaId":"AAD34F57-90D2-415F-9544-70B594D04E53"}]}]}],"references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055","source":"openssl-security@openssl.org","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c","source":"openssl-security@openssl.org","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6","source":"openssl-security@openssl.org","tags":["Mailing List","Patch"]},{"url":"https://www.openssl.org/news/secadv/20231106.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/11/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20231130-0010/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20231106.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-093430.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-128433.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-277137.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-331112.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-341067.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2023-41840","sourceIdentifier":"psirt@fortinet.com","published":"2023-11-14T18:15:53.240","lastModified":"2026-06-17T06:22:54.660","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path."},{"lang":"es","value":"Una vulnerabilidad de ruta de búsqueda no confiable en Fortinet FortiClientWindows 7.0.9 permite a un atacante realizar un ataque de DLL Hijack a través de una librería de motor OpenSSL malicioso en la ruta de búsqueda."}],"affected":[{"source":"psirt@fortinet.com","affectedData":[{"vendor":"Fortinet","product":"FortiClientWindows","defaultStatus":"unaffected","versions":[{"version":"7.2.0","lessThanOrEqual":"7.2.1","versionType":"semver","status":"affected"},{"version":"7.0.9","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@fortinet.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2023-11-16T13:58:40.386922Z","id":"CVE-2023-41840","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@fortinet.com","type":"Secondary","description":[{"lang":"en","value":"CWE-426"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.0.9:*:*:*:*:windows:*:*","matchCriteriaId":"27DA480C-41A7-4F1C-8319-98468277590D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:windows:*:*","matchCriteriaId":"CEC62C6E-AA05-4AE9-86C5-47D6763206AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:forticlient:7.2.1:*:*:*:*:windows:*:*","matchCriteriaId":"E3CFBB37-3186-43F8-B513-FBFFAA1B9DCF"}]}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-274","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"https://fortiguard.com/psirt/FG-IR-23-274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2023-33202","sourceIdentifier":"cve@mitre.org","published":"2023-11-23T16:15:07.273","lastModified":"2026-06-17T06:01:18.017","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM encoded streams containing X.509 certificates, PKCS8 encoded keys, and PKCS7 objects. Parsing a file that has crafted ASN.1 data through the PEMParser causes an OutOfMemoryError, which can enable a denial of service attack. (For users of the FIPS Java API: BC-FJA 1.0.2.3 and earlier are affected; BC-FJA 1.0.2.4 is fixed.)"},{"lang":"es","value":"Bouncy Castle para Java anterior a 1.73 contiene un posible problema de denegación de servicio (DoS) dentro de la clase Bouncy Castle org.bouncycastle.openssl.PEMParser. Esta clase analiza secuencias codificadas OpenSSL PEM que contienen certificados X.509, claves codificadas PKCS8 y objetos PKCS7. El análisis de un archivo que ha creado datos ASN.1 a través de PEMParser provoca un OutOfMemoryError, que puede permitir un ataque de denegación de servicio."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-11T17:51:39.623008Z","id":"CVE-2023-33202","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:bouncy_castle_for_java:*:*:*:*:*:*:*:*","versionEndExcluding":"1.73","matchCriteriaId":"A450303D-AF6E-4A81-BE1C-F744B728AC27"},{"vulnerable":true,"criteria":"cpe:2.3:a:bouncycastle:fips_java_api:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.2.4","matchCriteriaId":"326EBBC5-8448-412E-9B9E-6D93A0BD4790"}]}]}],"references":[{"url":"https://bouncycastle.org","source":"cve@mitre.org","tags":["Product"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902023%E2%80%9033202","source":"cve@mitre.org"},{"url":"https://github.com/bcgit/bc-java/wiki/CVE-2023-33202","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240125-0001/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bouncycastle.org","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE-2023-33202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240125-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-49210","sourceIdentifier":"cve@mitre.org","published":"2023-11-23T20:15:07.157","lastModified":"2026-06-17T06:35:36.430","vulnStatus":"Modified","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["unsupported-when-assigned"]}],"descriptions":[{"lang":"en","value":"The openssl (aka node-openssl) NPM package through 2.0.0 was characterized as \"a nonsense wrapper with no real purpose\" by its author, and accepts an opts argument that contains a verb field (used for command execution). NOTE: This vulnerability only affects products that are no longer supported by the maintainer."},{"lang":"es","value":"El paquete NPM openssl (también conocido como node-openssl) hasta 2.0.0 fue caracterizado por su autor como \"un contenedor sin sentido sin ningún propósito real\" y acepta un argumento opts que contiene un campo verbal (usado para la ejecución de comandos). NOTA: Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el fabricante."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:node-openssl_project:node-openssl:*:*:*:*:*:node.js:*:*","versionEndIncluding":"2.0.0","matchCriteriaId":"6BC1E54D-5E58-4AAF-91F2-689D0B1897B4"}]}]}],"references":[{"url":"https://gist.github.com/mcoimbra/b05a55a5760172dccaa0a827647ad63e","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/ossf/malicious-packages/tree/main/malicious/npm","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://www.npmjs.com/package/openssl","source":"cve@mitre.org","tags":["Product"]},{"url":"https://gist.github.com/mcoimbra/b05a55a5760172dccaa0a827647ad63e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/ossf/malicious-packages/tree/main/malicious/npm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.npmjs.com/package/openssl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}},{"cve":{"id":"CVE-2023-6129","sourceIdentifier":"openssl-security@openssl.org","published":"2024-01-09T17:15:12.147","lastModified":"2026-10-14T23:17:18.960","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: The POLY1305 MAC (message authentication code) implementation\ncontains a bug that might corrupt the internal state of applications running\non PowerPC CPU based platforms if the CPU provides vector instructions.\n\nImpact summary: If an attacker can influence whether the POLY1305 MAC\nalgorithm is used, the application state might be corrupted with various\napplication dependent consequences.\n\nThe POLY1305 MAC (message authentication code) implementation in OpenSSL for\nPowerPC CPUs restores the contents of vector registers in a different order\nthan they are saved. Thus the contents of some of these vector registers\nare corrupted when returning to the caller. The vulnerable code is used only\non newer PowerPC processors supporting the PowerISA 2.07 instructions.\n\nThe consequences of this kind of internal application state corruption can\nbe various - from no consequences, if the calling application does not\ndepend on the contents of non-volatile XMM registers at all, to the worst\nconsequences, where the attacker could get complete control of the application\nprocess. However unless the compiler uses the vector registers for storing\npointers, the most likely consequence, if any, would be an incorrect result\nof some application dependent calculations or a crash leading to a denial of\nservice.\n\nThe POLY1305 MAC algorithm is most frequently used as part of the\nCHACHA20-POLY1305 AEAD (authenticated encryption with associated data)\nalgorithm. The most common usage of this AEAD cipher is with TLS protocol\nversions 1.2 and 1.3. If this cipher is enabled on the server a malicious\nclient can influence whether this AEAD cipher is used. This implies that\nTLS server applications using OpenSSL can be potentially impacted. However\nwe are currently not aware of any concrete application that would be affected\nby this issue therefore we consider this a Low severity security issue."},{"lang":"es","value":"Resumen del problema: la implementación POLY1305 MAC (código de autenticación de mensajes) contiene un error que podría dañar el estado interno de las aplicaciones que se ejecutan en plataformas basadas en CPU PowerPC si la CPU proporciona instrucciones vectoriales. Resumen del impacto: si un atacante puede influir en el uso del algoritmo MAC POLY1305, el estado de la aplicación podría corromperse con varias consecuencias dependientes de la aplicación. La implementación POLY1305 MAC (código de autenticación de mensajes) en OpenSSL para CPU PowerPC restaura el contenido de los registros vectoriales en un orden diferente al que se guardan. Por lo tanto, el contenido de algunos de estos registros vectoriales se corrompe cuando regresa al llamante. El código vulnerable se utiliza sólo en procesadores PowerPC más nuevos que admiten las instrucciones PowerISA 2.07. Las consecuencias de este tipo de corrupción del estado de la aplicación interna pueden ser diversas: desde ninguna consecuencia, si la aplicación que llama no depende en absoluto del contenido de los registros XMM no volátiles, hasta las peores consecuencias, donde el atacante podría obtener el control total de el proceso de solicitud. Sin embargo, a menos que el compilador utilice registros vectoriales para almacenar punteros, la consecuencia más probable, si la hubiera, sería un resultado incorrecto de algunos cálculos dependientes de la aplicación o una falla que provocaría una denegación de servicio. El algoritmo POLY1305 MAC se utiliza con mayor frecuencia como parte del algoritmo CHACHA20-POLY1305 AEAD (cifrado autenticado con datos asociados). El uso más común de este cifrado AEAD es con las versiones 1.2 y 1.3 del protocolo TLS. Si este cifrado está habilitado en el servidor, un cliente malicioso puede influir en si se utiliza este cifrado AEAD. Esto implica que las aplicaciones del servidor TLS que utilizan OpenSSL pueden verse potencialmente afectadas. Sin embargo, actualmente no conocemos ninguna aplicación concreta que pueda verse afectada por este problema, por lo que lo consideramos un problema de seguridad de gravedad baja."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.2.0","lessThan":"3.2.1","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThan":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.13","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEC NMS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0 SP1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":4.2},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-01-22T14:31:57.012999Z","id":"CVE-2023-6129","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-440"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndIncluding":"3.0.12","matchCriteriaId":"E74FD809-31DE-4F31-82D6-6D71DF453A03"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndIncluding":"3.1.4","matchCriteriaId":"28DDD110-1559-46F9-A62B-1B4648F83933"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"92B2CAA8-D3C8-4789-8B6A-D6FC6C294842"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://www.openssl.org/news/secadv/20240109.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/11/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://security.netapp.com/advisory/ntap-20240216-0009/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240426-0008/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240426-0013/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240503-0011/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20240109.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-331112.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2024-0727","sourceIdentifier":"openssl-security@openssl.org","published":"2024-01-26T09:15:07.637","lastModified":"2026-10-15T01:17:18.263","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue."},{"lang":"es","value":"Resumen del problema: el procesamiento de un archivo PKCS12 con formato malintencionado puede hacer que OpenSSL falle y provoque un posible ataque de denegación de servicio. Resumen de impacto: las aplicaciones que cargan archivos en formato PKCS12 desde fuentes que no son de confianza pueden finalizar abruptamente. Un archivo en formato PKCS12 puede contener certificados y claves y puede provenir de una fuente que no es de confianza. La especificación PKCS12 permite que ciertos campos sean NULL, pero OpenSSL no verifica correctamente este caso. Esto puede provocar una desreferencia del puntero NULL que provoque el bloqueo de OpenSSL. Si una aplicación procesa archivos PKCS12 de una fuente que no es de confianza utilizando las API de OpenSSL, esa aplicación será vulnerable a este problema. Las API de OpenSSL que son vulnerables a esto son: PKCS12_parse(), PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes() y PKCS12_newpass(). También solucionamos un problema similar en SMIME_write_PKCS7(). Sin embargo, dado que esta función está relacionada con la escritura de datos, no la consideramos importante para la seguridad. Los módulos FIPS en 3.2, 3.1 y 3.0 no se ven afectados por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.2.0","lessThan":"3.2.1","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThan":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.13","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1x","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zj","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIDIS Prime","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0.700","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEC NMS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0 SP1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-08T20:15:21.221130Z","id":"CVE-2024-0727","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zj","matchCriteriaId":"E30B9424-68AA-4ED4-A1CB-3DA32A2350EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1x","matchCriteriaId":"93CF937D-2520-44AF-B40B-B41720BEAB36"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.13","matchCriteriaId":"21346C7C-ED3A-43D4-BBCB-41D62F7ACBF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.1.5","matchCriteriaId":"AAD34F57-90D2-415F-9544-70B594D04E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.2.0:-:*:*:*:*:*:*","matchCriteriaId":"AA5220D8-3CAD-4524-BA73-1656FB437446"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://www.openssl.org/news/secadv/20240125.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/11/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240208-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20240125.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-277137.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-331112.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2023-51787","sourceIdentifier":"cve@mitre.org","published":"2024-02-15T06:15:46.067","lastModified":"2026-06-17T06:41:40.287","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX thread that uses OpenSSL exits, limited per-task memory is not freed, resulting in a memory leak."},{"lang":"es","value":"Se descubrió un problema en Wind River VxWorks 7 22.09 y 23.03. Si se cierra una tarea de VxWorks o un subproceso POSIX que utiliza OpenSSL, la memoria limitada por tarea no se libera, lo que genera una pérdida de memoria."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"windriver","product":"vxworks","defaultStatus":"unknown","cpes":["cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*"],"versions":[{"version":"7_22.09","status":"affected"},{"version":"23.03","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-02-15T16:52:29.192813Z","id":"CVE-2023-51787","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:vxworks:7:22.09:*:*:*:*:*:*","matchCriteriaId":"5312EFEB-8CBD-4062-BCF7-21B9135CA69C"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:vxworks:7:23.03:*:*:*:*:*:*","matchCriteriaId":"2DAC478C-A6EA-47F6-909A-8565DCDF62C8"}]}]}],"references":[{"url":"https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2023-51787","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2023-51787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-0394","sourceIdentifier":"cve@rapid7.com","published":"2024-04-03T14:15:13.170","lastModified":"2026-06-17T06:53:24.610","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges and execute arbitrary code with SYSTEM privilege.  The vulnerability is caused by the product's implementation of OpenSSL's`OPENSSLDIR` parameter where it is set to a path accessible to low-privileged users.  The vulnerability has been remediated and fixed in version 4.5.5. \n"},{"lang":"es","value":"Las versiones de Rapid7 Minerva Armor inferiores a 4.5.5 sufren de una vulnerabilidad de escalada de privilegios mediante la cual un atacante autenticado puede elevar privilegios y ejecutar código arbitrario con privilegios de SYSTEM. La vulnerabilidad es causada por la implementación del producto del parámetro `OPENSSLDIR` de OpenSSL, donde se establece en una ruta accesible para usuarios con pocos privilegios. La vulnerabilidad ha sido remediada y reparada en la versión 4.5.5."}],"affected":[{"source":"cve@rapid7.com","affectedData":[{"vendor":"Rapid7","product":"Minerva","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"4.5.5","versionType":"custom","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"rapid7","product":"minerva_armor","defaultStatus":"unknown","cpes":["cpe:2.3:a:rapid7:minerva_armor:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"4.5.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@rapid7.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-22T14:40:40.690539Z","id":"CVE-2024-0394","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@rapid7.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"references":[{"url":"https://www.rapid7.com/blog/post/2024/04/03/cve-2024-0394-rapid7-minerva-armor-privilege-escalation-fixed/","source":"cve@rapid7.com"},{"url":"https://www.rapid7.com/blog/post/2024/04/03/cve-2024-0394-rapid7-minerva-armor-privilege-escalation-fixed/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2024-2511","sourceIdentifier":"openssl-security@openssl.org","published":"2024-04-08T14:15:07.660","lastModified":"2026-10-15T01:17:44.053","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue."},{"lang":"es","value":"Resumen del problema: algunas configuraciones de servidor TLS no predeterminadas pueden causar un crecimiento ilimitado de la memoria al procesar sesiones TLSv1.3. Resumen de impacto: un atacante puede explotar ciertas configuraciones del servidor para desencadenar un crecimiento ilimitado de la memoria que conduciría a una denegación de servicio. Este problema puede ocurrir en TLSv1.3 si se utiliza la opción SSL_OP_NO_TICKET no predeterminada (pero no si también se configura la compatibilidad con early_data y se utiliza la protección antirrepetición predeterminada). En este caso, bajo ciertas condiciones, el caché de la sesión puede entrar en un estado incorrecto y no se vaciará correctamente a medida que se llena. La caché de la sesión seguirá creciendo de forma ilimitada. Un cliente malintencionado podría crear deliberadamente el escenario para que este fallo fuerce una denegación de servicio. También puede ocurrir por accidente durante el funcionamiento normal. Este problema solo afecta a los servidores TLS que admiten TLSv1.3. No afecta a los clientes TLS. Los módulos FIPS en 3.2, 3.1 y 3.0 no se ven afectados por este problema. OpenSSL 1.0.2 tampoco se ve afectado por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.2.0","lessThan":"3.2.2","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThan":"3.1.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.14","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1y","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM RM1224 LTE(4G) EU","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM RM1224 LTE(4G) NAM","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M804PB","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M812-1 ADSL-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M812-1 ADSL-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M816-1 ADSL-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M816-1 ADSL-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M826-2 SHDSL-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M874-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M874-3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M874-3 3G-Router (CN)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-3 (ROK)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-4","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-4 (EU)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-4 (NAM)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM853-1 (A1)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM853-1 (B1)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM853-1 (EU)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (A1)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (B1)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (CN)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (EU)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (RoW)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE S615 EEC LAN-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE S615 LAN-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V8.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XCM-/XRM-/XCH-/XRH-300 family","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-09T15:14:41.481807Z","id":"CVE-2024-2511","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-1325"}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08","source":"openssl-security@openssl.org"},{"url":"https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20240408.txt","source":"openssl-security@openssl.org"},{"url":"http://www.openwall.com/lists/oss-security/2024/04/08/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240503-0013/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20240408.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-354112.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2023-6237","sourceIdentifier":"openssl-security@openssl.org","published":"2024-04-25T07:15:45.270","lastModified":"2026-10-14T23:17:19.220","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue."},{"lang":"es","value":"Resumen del problema: la comprobación de claves públicas RSA inválidas excesivamente largas puede llevar mucho tiempo. Resumen de impacto: las aplicaciones que utilizan la función EVP_PKEY_public_check() para comprobar las claves públicas RSA pueden experimentar grandes retrasos. Cuando la clave que se está verificando se obtuvo de una fuente que no es confiable, esto puede dar lugar a una denegación de servicio. Cuando se llama a la función EVP_PKEY_public_check() en claves públicas RSA, se realiza un cálculo para confirmar que el módulo RSA, n, es compuesto. Para claves RSA válidas, n es un producto de dos o más números primos grandes y este cálculo se completa rápidamente. Sin embargo, si n es un número primo demasiado grande, entonces este cálculo llevaría mucho tiempo. Una aplicación que llama a EVP_PKEY_public_check() y proporciona una clave RSA obtenida de una fuente que no es de confianza podría ser vulnerable a un ataque de denegación de servicio. La función EVP_PKEY_public_check() no se llama desde otras funciones de OpenSSL, sin embargo, se llama desde la aplicación de línea de comandos pkey de OpenSSL. Por esa razón, esa aplicación también es vulnerable si se usa con las opciones '-pubin' y '-check' en datos que no son de confianza. La implementación de OpenSSL SSL/TLS no se ve afectada por este problema. Los proveedores FIPS OpenSSL 3.0 y 3.1 se ven afectados por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.0.0","lessThan":"3.0.13","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThan":"3.1.5","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThan":"3.2.1","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEC NMS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0 SP1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-20T14:44:52.382969Z","id":"CVE-2023-6237","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-606"}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20240115.txt","source":"openssl-security@openssl.org"},{"url":"http://www.openwall.com/lists/oss-security/2024/03/11/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240531-0007/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20240115.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-331112.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2023-27362","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2024-05-03T02:15:14.350","lastModified":"2026-06-17T05:44:52.543","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"3CX Uncontrolled Search Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of 3CX. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-20026."},{"lang":"es","value":"Vulnerabilidad de escalada de privilegios locales en la ruta de búsqueda no controlada de 3CX. Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de 3CX. Un atacante primero debe obtener la capacidad de ejecutar código con pocos privilegios en el sistema de destino para poder aprovechar esta vulnerabilidad. La falla específica existe dentro de la configuración de OpenSSL. El producto carga un archivo de configuración OpenSSL desde una ubicación no segura. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto de SYSTEM. Fue ZDI-CAN-20026."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"3CX","product":"3CX","defaultStatus":"unknown","versions":[{"version":"18","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"3cx","product":"3cx","defaultStatus":"unknown","cpes":["cpe:2.3:a:3cx:3cx:18:*:*:*:*:*:*:*"],"versions":[{"version":"18","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-03T17:17:14.461909Z","id":"CVE-2023-27362","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:3cx:3cx:*:*:*:*:*:*:*:*","versionStartIncluding":"18.0.0.451","versionEndExcluding":"18.0.8.917","matchCriteriaId":"A3F9FBE0-D034-4937-90B3-4D13C27EC5DF"}]}]}],"references":[{"url":"https://www.3cx.com/blog/releases/v18-u8/","source":"zdi-disclosures@trendmicro.com","tags":["Release Notes"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-1153/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]},{"url":"https://www.3cx.com/blog/releases/v18-u8/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-1153/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-26306","sourceIdentifier":"cve@mitre.org","published":"2024-05-14T15:08:51.197","lastModified":"2026-06-17T07:17:35.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This side channel could be sufficient for an attacker to recover credential plaintext. It requires the attacker to send a large number of messages for decryption, as described in \"Everlasting ROBOT: the Marvin Attack\" by Hubert Kario."},{"lang":"es","value":"iPerf3 anterior a 3.17, cuando se usa con OpenSSL anterior a 3.2.0 como servidor con autenticación RSA, permite un canal lateral de temporización en las operaciones de descifrado RSA. Este canal lateral podría ser suficiente para que un atacante recupere el texto sin formato de las credenciales. Requiere que el atacante envíe una gran cantidad de mensajes para descifrarlos, como se describe en \"Everlasting ROBOT: the Marvin Attack\" de Hubert Kario."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-22T18:32:36.929056Z","id":"CVE-2024-26306","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-385"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:es:iperf3:*:*:*:*:*:*:*:*","versionEndExcluding":"3.17","matchCriteriaId":"B22D97C0-B832-4267-84A5-66213A35C77F"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*","matchCriteriaId":"95BA156C-C977-4F0C-8DFB-3FAE9CC8C02D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*","matchCriteriaId":"AD7447BC-F315-4298-A822-549942FC118B"}]}]}],"references":[{"url":"https://downloads.es.net/pub/iperf/esnet-secadv-2024-0001.txt.asc","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/esnet/iperf/releases/tag/3.17","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"https://www.insyde.com/security-pledge/SA-2024005","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://downloads.es.net/pub/iperf/esnet-secadv-2024-0001.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/esnet/iperf/releases/tag/3.17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20250228-0007/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2024-4603","sourceIdentifier":"openssl-security@openssl.org","published":"2024-05-16T16:15:10.643","lastModified":"2026-06-17T08:02:14.847","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue."},{"lang":"es","value":"Resumen del problema: la comprobación de claves o parámetros DSA excesivamente largos puede resultar muy lenta. Resumen de impacto: las aplicaciones que utilizan las funciones EVP_PKEY_param_check() o EVP_PKEY_public_check() para comprobar una clave pública de DSA o parámetros de DSA pueden experimentar grandes retrasos. Cuando la clave o los parámetros que se están verificando se obtuvieron de una fuente que no es confiable, esto puede dar lugar a una Denegación de Servicio. Las funciones EVP_PKEY_param_check() o EVP_PKEY_public_check() realizan varias comprobaciones de los parámetros DSA. Algunos de esos cálculos toman mucho tiempo si el módulo (parámetro `p`) es demasiado grande. Intentar utilizar un módulo muy grande es lento y OpenSSL no permitirá el uso de claves públicas con un módulo de más de 10.000 bits de longitud para la verificación de firmas. Sin embargo, las funciones de verificación de claves y parámetros no limitan el tamaño del módulo al realizar las verificaciones. Una aplicación que llama a EVP_PKEY_param_check() o EVP_PKEY_public_check() y proporciona una clave o parámetros obtenidos de una fuente que no es de confianza podría ser vulnerable a un ataque de denegación de servicio. OpenSSL no llama a estas funciones en claves DSA que no son de confianza, por lo que solo las aplicaciones que llaman directamente a estas funciones pueden ser vulnerables. También son vulnerables las aplicaciones de línea de comandos OpenSSL pkey y pkeyparam cuando se usa la opción `-check`. La implementación de OpenSSL SSL/TLS no se ve afectada por este problema. Los proveedores FIPS OpenSSL 3.0 y 3.1 se ven afectados por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.0.0","lessThan":"3.0.14","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThan":"3.1.6","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThan":"3.2.2","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.1","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"openssl","product":"openssl","defaultStatus":"unaffected","cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"versions":[{"version":"3.0.0","lessThan":"3.0.14","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThan":"3.1.6","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThan":"3.2.2","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-05-16T18:27:25.638098Z","id":"CVE-2024-4603","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-606"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-834"}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20240516.txt","source":"openssl-security@openssl.org"},{"url":"http://www.openwall.com/lists/oss-security/2024/05/16/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240621-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20240516.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2024-2408","sourceIdentifier":"security@php.net","published":"2024-06-09T20:15:09.270","lastModified":"2026-06-17T07:24:28.497","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default), is vulnerable to the Marvin Attack unless it is used with an OpenSSL version that includes the changes from this pull request:  https://github.com/openssl/openssl/pull/13817  (rsa_pkcs1_implicit_rejection). These changes are part of OpenSSL 3.2 and have also been backported to stable versions of various Linux distributions, as well as to the PHP builds provided for Windows since the previous release. All distributors and builders should ensure that this version is used to prevent PHP from being vulnerable.\n\nPHP Windows builds for the versions 8.1.29, 8.2.20 and 8.3.8 and above include OpenSSL patches that fix the vulnerability."},{"lang":"es","value":"La función openssl_private_decrypt en PHP, cuando se usa el relleno PKCS1 (OPENSSL_PKCS1_PADDING, que es el valor predeterminado), es vulnerable al ataque Marvin a menos que se use con una versión de OpenSSL que incluya los cambios de esta solicitud de extracción: https://github.com/ openssl/openssl/pull/13817 (rsa_pkcs1_implicit_rejection). Estos cambios son parte de OpenSSL 3.2 y también se han adaptado a versiones estables de varias distribuciones de Linux, así como a las compilaciones de PHP proporcionadas para Windows desde la versión anterior. Todos los distribuidores y constructores deben asegurarse de que esta versión se utilice para evitar que PHP sea vulnerable. Las compilaciones PHP de Windows para las versiones 8.1.29, 8.2.20 y 8.3.8 y superiores incluyen parches OpenSSL que corrigen la vulnerabilidad."}],"affected":[{"source":"security@php.net","affectedData":[{"vendor":"PHP Group","product":"PHP","defaultStatus":"affected","modules":["openssl"],"programRoutines":[{"name":"openssl_private_decrypt"}],"repo":"https://github.com/php/php-src","versions":[{"version":"8.1.*","lessThan":"8.1.29","versionType":"semver","status":"affected"},{"version":"8.2.*","lessThan":"8.2.20","versionType":"semver","status":"affected"},{"version":"8.3.*","lessThan":"8.3.8","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"php","product":"php","defaultStatus":"affected","cpes":["cpe:2.3:a:php:php:*:*:*:*:*:*:*:*"],"versions":[{"version":"8.1.0","lessThan":"8.1.29","versionType":"semver","status":"affected"},{"version":"8.2.0","lessThan":"8.2.20","versionType":"semver","status":"affected"},{"version":"8.3.0","lessThan":"8.3.8","versionType":"semver","status":"affected"}]},{"vendor":"fedoraproject","product":"fedora","defaultStatus":"unknown","cpes":["cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*"],"versions":[{"version":"40","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-14T13:58:06.996571Z","id":"CVE-2024-2408","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"8.1.0","versionEndExcluding":"8.1.29","matchCriteriaId":"7DC2EEF8-834B-42A1-8DA3-0C2CF22A7070"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.2.20","matchCriteriaId":"A39988FF-D854-4277-9D66-6911AF371DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.0","versionEndExcluding":"8.3.8","matchCriteriaId":"F579FFC1-4F81-4755-B14B-3AA73AC9FF7A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*","matchCriteriaId":"CA277A6C-83EC-4536-9125-97B84C4FAF59"}]}]}],"references":[{"url":"https://github.com/php/php-src/security/advisories/GHSA-hh26-4ppw-5864","source":"security@php.net","tags":["Exploit","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/","source":"security@php.net","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/","source":"security@php.net"},{"url":"https://github.com/php/php-src/security/advisories/GHSA-hh26-4ppw-5864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20250321-0008/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2024-37309","sourceIdentifier":"security-advisories@github.com","published":"2024-06-13T14:15:13.060","lastModified":"2026-06-17T07:38:06.980","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where the TLS endpoint (port 4200) permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request renegotiation of security parameters during an ongoing TLS session. This flaw could lead to excessive consumption of CPU resources, resulting in potential server overload and service disruption. The vulnerability was confirmed using an openssl client where the command `R` initiates renegotiation, followed by the server confirming with `RENEGOTIATING`. This vulnerability allows an attacker to perform a denial of service attack by exhausting server CPU resources through repeated TLS renegotiations. This impacts the availability of services running on the affected server, posing a significant risk to operational stability and security. TLS 1.3 explicitly forbids renegotiation, since it closes a window of opportunity for an attack. Version 5.7.2 of CrateDB contains the fix for the issue.\n"},{"lang":"es","value":"CrateDB es una base de datos SQL distribuida. Se identificó una vulnerabilidad de alto riesgo en versiones anteriores a la 5.7.2 donde el endpoint TLS (puerto 4200) permite la renegociación iniciada por el cliente. En este escenario, un atacante puede aprovechar esta característica para solicitar repetidamente la renegociación de los parámetros de seguridad durante una sesión TLS en curso. Esta falla podría provocar un consumo excesivo de recursos de la CPU, lo que provocaría una posible sobrecarga del servidor e interrupción del servicio. La vulnerabilidad se confirmó utilizando un cliente openssl donde el comando \"R\" inicia la renegociación, seguido por el servidor que confirma con \"RENEGOTIATING\". Esta vulnerabilidad permite a un atacante realizar un ataque de denegación de servicio agotando los recursos de la CPU del servidor mediante repetidas renegociaciones de TLS. Esto afecta la disponibilidad de los servicios que se ejecutan en el servidor afectado, lo que representa un riesgo significativo para la estabilidad operativa y la seguridad. TLS 1.3 prohíbe explícitamente la renegociación, ya que cierra una ventana de oportunidad para un ataque. La versión 5.7.2 de CrateDB contiene la solución al problema."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"crate","product":"crate","versions":[{"version":"< 5.7.2","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"cratedb","product":"cratedb","defaultStatus":"unknown","cpes":["cpe:2.3:a:cratedb:cratedb:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"5.7.2","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-12T19:17:22.486657Z","id":"CVE-2024-37309","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cratedb:cratedb:*:*:*:*:*:*:*:*","versionEndExcluding":"5.7.2","matchCriteriaId":"2A20341A-DDDF-4B85-9E14-89E29EDA8B4E"}]}]}],"references":[{"url":"https://cratedb.com/docs/crate/reference/en/latest/appendices/release-notes/5.7.2.html","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/crate/crate/commit/1dde03bdf031a20886065195527e368e4a3218b3","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/crate/crate/security/advisories/GHSA-x268-qpg6-w9g2","source":"security-advisories@github.com","tags":["Exploit","Vendor Advisory"]},{"url":"https://cratedb.com/docs/crate/reference/en/latest/appendices/release-notes/5.7.2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://github.com/crate/crate/commit/1dde03bdf031a20886065195527e368e4a3218b3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/crate/crate/security/advisories/GHSA-x268-qpg6-w9g2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-37305","sourceIdentifier":"security-advisories@github.com","published":"2024-06-17T20:15:12.880","lastModified":"2026-06-17T07:38:06.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum algorithms from liboqs. Flaws have been identified in the way oqs-provider handles lengths decoded with DECODE_UINT32 at the start of serialized hybrid (traditional + post-quantum) keys and signatures. Unchecked length values are later used for memory reads and writes; malformed input can lead to crashes or information leakage. Handling of plain/non-hybrid PQ key operation is not affected. This issue has been patched in in v0.6.1. All users are advised to upgrade. There are no workarounds for this issue."},{"lang":"es","value":"oqs-provider es un proveedor de la librería de criptografía OpenSSL 3 que agrega soporte para criptografía poscuántica en TLS, X.509 y S/MIME utilizando algoritmos poscuánticos de liboqs. Se han identificado fallas en la forma en que oqs-provider maneja las longitudes decodificadas con DECODE_UINT32 al inicio de firmas y claves híbridas serializadas (tradicionales + poscuánticas). Los valores de longitud no verificados se utilizan posteriormente para lecturas y escrituras de memoria; La entrada mal formada puede provocar fallas o fugas de información. El manejo de la operación de clave PQ simple/no híbrida no se ve afectado. Este problema se solucionó en la versión 0.6.1. Se recomienda a todos los usuarios que actualicen. No existen workarounds para este problema."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"open-quantum-safe","product":"oqs-provider","versions":[{"version":"< 0.6.1","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"open_quantum_safe","product":"oqs_provider","defaultStatus":"unknown","cpes":["cpe:2.3:a:open_quantum_safe:oqs_provider:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"0.6.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-18T13:31:38.141442Z","id":"CVE-2024-37305","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"},{"lang":"en","value":"CWE-130"},{"lang":"en","value":"CWE-190"},{"lang":"en","value":"CWE-680"},{"lang":"en","value":"CWE-805"}]}],"references":[{"url":"https://github.com/open-quantum-safe/oqs-provider/pull/416","source":"security-advisories@github.com"},{"url":"https://github.com/open-quantum-safe/oqs-provider/security/advisories/GHSA-pqvr-5cr8-v6fx","source":"security-advisories@github.com"},{"url":"https://github.com/open-quantum-safe/oqs-provider/pull/416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/open-quantum-safe/oqs-provider/security/advisories/GHSA-pqvr-5cr8-v6fx","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2024-5535","sourceIdentifier":"openssl-security@openssl.org","published":"2024-06-27T11:15:24.447","lastModified":"2026-10-15T01:19:17.867","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a \"no overlap\"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available."},{"lang":"es","value":"Resumen del problema: llamar a la función API de OpenSSL SSL_select_next_proto con un búfer de protocolos de cliente compatible vacío puede provocar una falla o que se envíe contenido de la memoria al igual. Resumen de impacto: una lectura excesiva del búfer puede tener una variedad de consecuencias potenciales, como un comportamiento inesperado de la aplicación o un bloqueo. En particular, este problema podría provocar que se envíen hasta 255 bytes de datos privados arbitrarios de la memoria al par, lo que provocaría una pérdida de confidencialidad. Sin embargo, este problema solo afecta a las aplicaciones que llaman directamente a la función SSL_select_next_proto con una lista de longitud 0 de protocolos de cliente compatibles. Normalmente, esto nunca sería un escenario válido y normalmente no está bajo el control de un atacante, pero puede ocurrir por accidente en el caso de un error de configuración o programación en la aplicación que realiza la llamada. La función API de OpenSSL SSL_select_next_proto suele ser utilizada por aplicaciones TLS que admiten ALPN (negociación de protocolo de capa de aplicación) o NPN (negociación de siguiente protocolo). NPN es más antiguo, nunca se estandarizó y está en desuso en favor de ALPN. Creemos que ALPN está mucho más implementado que NPN. La función SSL_select_next_proto acepta una lista de protocolos del servidor y una lista de protocolos del cliente y devuelve el primer protocolo que aparece en la lista de servidores que también aparece en la lista de clientes. En caso de que no haya superposición entre las dos listas, devuelve el primer elemento de la lista de clientes. En cualquier caso, indicará si se encontró una superposición entre las dos listas. En el caso de que se llame a SSL_select_next_proto con una lista de clientes de longitud cero, no detecta esta condición y devuelve la memoria inmediatamente después del puntero de la lista de clientes (e informa que no hubo superposición en las listas). Esta función normalmente se llama desde una devolución de llamada de la aplicación del lado del servidor para ALPN o una devolución de llamada de la aplicación del lado del cliente para NPN. En el caso de ALPN, libssl garantiza que la lista de protocolos proporcionados por el cliente nunca tendrá una longitud cero. La lista de protocolos del servidor proviene de la aplicación y normalmente nunca se debe esperar que tenga una longitud cero. En este caso, si la función SSL_select_next_proto se llamó como se esperaba (con la lista proporcionada por el cliente pasada en los parámetros client/client_len), entonces la aplicación no será vulnerable a este problema. Si la aplicación se configuró accidentalmente con una lista de servidores de longitud cero y accidentalmente pasó esa lista de servidores de longitud cero en los parámetros client/client_len y además no pudo manejar correctamente una respuesta \"sin superposición\" (que normalmente daría como resultado una falla en el protocolo de enlace en ALPN) entonces será vulnerable a este problema. En el caso de NPN, el protocolo permite al cliente seleccionar de manera oportunista un protocolo cuando no hay superposición. OpenSSL devuelve el primer protocolo de cliente en el caso de que no haya superposición para respaldar esto. La lista de protocolos de cliente proviene de la aplicación y normalmente nunca se debe esperar que tenga una longitud cero. Sin embargo, si la función SSL_select_next_proto se llama accidentalmente con un client_len de 0, se devolverá un puntero de memoria no válido. Si la aplicación utiliza esta salida como protocolo oportunista, se producirá la pérdida de confidencialidad. Este problema se ha evaluado como de gravedad baja porque es más probable que las aplicaciones sean vulnerables si utilizan NPN en lugar de ALPN, pero NPN no se utiliza ampliamente. También requiere una configuración de la aplicación o un error de programación.-- truncada---"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.3.0","lessThan":"3.3.2","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThan":"3.2.3","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThan":"3.1.7","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.15","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1za","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zk","versionType":"custom","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"openssl","product":"openssl","defaultStatus":"unknown","cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"versions":[{"version":"3.3.0","lessThan":"3.3.2","versionType":"custom","status":"affected"},{"version":"3.2.0","lessThan":"3.2.3","versionType":"custom","status":"affected"},{"version":"3.1.0","lessThan":"3.1.7","versionType":"custom","status":"affected"},{"version":"3.0.0","lessThan":"3.0.15","versionType":"custom","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1za","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zk","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XCM-/XRM-/XCH-/XRH-300 family","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIDIS Prime","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0.700","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-08T00:00:00+00:00","id":"CVE-2024-5535","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c","source":"openssl-security@openssl.org"},{"url":"https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c","source":"openssl-security@openssl.org"},{"url":"https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20240627.txt","source":"openssl-security@openssl.org"},{"url":"http://www.openwall.com/lists/oss-security/2024/06/27/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2024/06/28/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2024/08/15/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240712-0005/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20241025-0006/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20241025-0010/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20240627.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-277137.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2024-5642","sourceIdentifier":"cna@python.org","published":"2024-06-27T21:15:16.070","lastModified":"2026-07-31T15:16:26.997","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CPython 3.9 and earlier doesn't disallow configuring an empty list (\"[]\") for SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used (see CVE-2024-5535 for OpenSSL). This vulnerability is of low severity due to NPN being not widely used and specifying an empty list likely being uncommon in-practice (typically a protocol name would be configured)."},{"lang":"es","value":"CPython 3.9 y versiones anteriores no permiten la configuración de una lista vacía (\"[]\") para SSLContext.set_npn_protocols(), que es un valor no válido para la API OpenSSL subyacente. Esto da como resultado una lectura excesiva del búfer cuando se utiliza NPN (consulte CVE-2024-5535 para OpenSSL). Esta vulnerabilidad es de baja gravedad debido a que NPN no se usa ampliamente y especificar una lista vacía probablemente sea poco común en la práctica (normalmente se configuraría un nombre de protocolo)."}],"affected":[{"source":"cna@python.org","affectedData":[{"vendor":"Python Software Foundation","product":"CPython","defaultStatus":"unaffected","repo":"https://github.com/python/cpython","versions":[{"version":"0","lessThan":"3.9.24","versionType":"python","status":"affected"},{"version":"3.10.0a1","lessThan":"3.10.0b1","versionType":"python","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-06-28T13:47:34.169947Z","id":"CVE-2024-5642","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"references":[{"url":"http://www.openwall.com/lists/oss-security/2024/06/28/4","source":"cna@python.org"},{"url":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e","source":"cna@python.org"},{"url":"https://github.com/python/cpython/commit/a2cdbb6e8188ba9ba8b356b28d91bff60e86fe31","source":"cna@python.org"},{"url":"https://github.com/python/cpython/issues/121227","source":"cna@python.org"},{"url":"https://github.com/python/cpython/pull/23014","source":"cna@python.org"},{"url":"https://jbp.io/2024/06/27/cve-2024-5535-openssl-memory-safety.html","source":"cna@python.org"},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/PLP2JI3PJY33YG6P5BZYSSNU66HASXBQ/","source":"cna@python.org"},{"url":"https://security.netapp.com/advisory/ntap-20240726-0005/","source":"cna@python.org"},{"url":"http://www.openwall.com/lists/oss-security/2024/06/28/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/python/cpython/issues/121227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/python/cpython/pull/23014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://jbp.io/2024/06/27/cve-2024-5535-openssl-memory-safety.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://mail.python.org/archives/list/security-announce@python.org/thread/PLP2JI3PJY33YG6P5BZYSSNU66HASXBQ/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240726-0005/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2024-6975","sourceIdentifier":"2505284f-8ffb-486c-bf60-e19c1097a90b","published":"2024-07-31T17:15:11.640","lastModified":"2026-06-17T08:19:06.767","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Cato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file.\nThis issue affects SDP Client before 5.10.34."},{"lang":"es","value":" Escalada de privilegios locales del cliente SDP de Cato Networks Windows SDP a través del archivo de configuración openssl. Este problema afecta a SDP Client anterior a la versión 5.10.34."}],"affected":[{"source":"2505284f-8ffb-486c-bf60-e19c1097a90b","affectedData":[{"vendor":"Cato Networks","product":"SDP Client","defaultStatus":"unaffected","platforms":["Windows"],"versions":[{"version":"0","lessThan":"5.10.34","versionType":"custom","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"catonetworks","product":"sdp_client","defaultStatus":"unaffected","cpes":["cpe:2.3:a:catonetworks:sdp_client:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"5.10.34","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"2505284f-8ffb-486c-bf60-e19c1097a90b","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-31T17:12:02.402880Z","id":"CVE-2024-6975","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"2505284f-8ffb-486c-bf60-e19c1097a90b","type":"Secondary","description":[{"lang":"en","value":"CWE-426"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-426"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:catonetworks:cato_client:*:*:*:*:*:windows:*:*","versionEndExcluding":"5.10.34","matchCriteriaId":"ADCE09F5-AC75-454D-847F-23A6E11C145D"}]}]}],"references":[{"url":"https://support.catonetworks.com/hc/en-us/articles/19758025406621-CVE-2024-6975-Windows-SDP-Client-Local-Privilege-Escalation-via-openssl-configuration-file","source":"2505284f-8ffb-486c-bf60-e19c1097a90b","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-45238","sourceIdentifier":"cve@mitre.org","published":"2024-08-24T23:15:04.303","lastModified":"2026-06-17T07:53:50.030","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a resource certificate containing a bit string that doesn't properly decode into a Subject Public Key. OpenSSL does not report this problem during parsing, and when compiled with OpenSSL libcrypto versions below 3, Fort recklessly dereferences the pointer. Because Fort is an RPKI Relying Party, a crash can lead to Route Origin Validation unavailability, which can lead to compromised routing."},{"lang":"es","value":"Se descubrió un problema en Fort antes de la versión 1.6.3. Un repositorio RPKI malicioso que desciende de un Trust Anchor (confiable) puede servir (a través de rsync o RRDP) un certificado de recurso que contiene una cadena de bits que no se decodifica correctamente en una clave pública del sujeto. OpenSSL no informa este problema durante el análisis, y cuando se compila con versiones de libcrypto de OpenSSL inferiores a 3, Fort imprudentemente elimina la referencia al puntero. Debido a que Fort es una parte de confianza de RPKI, una falla puede provocar que la validación del origen de la ruta no esté disponible, lo que puede comprometer el enrutamiento."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"fort_validator_project","product":"fort_validator","defaultStatus":"unknown","cpes":["cpe:2.3:a:fort_validator_project:fort_validator:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"1.6.3","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-26T14:04:49.900681Z","id":"CVE-2024-45238","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nicmx:fort_validator:*:*:*:*:*:*:*:*","versionEndExcluding":"1.6.3","matchCriteriaId":"8C660C6E-5D9F-44FE-805D-ADC77F2755C2"}]}]}],"references":[{"url":"https://nicmx.github.io/FORT-validator/CVE.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/02/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2023-46809","sourceIdentifier":"support@hackerone.com","published":"2024-09-07T16:15:02.343","lastModified":"2026-06-17T06:31:40.913","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL which are unpatched are vulnerable to the Marvin Attack - https://people.redhat.com/~hkario/marvin/, if PCKS #1 v1.5 padding is allowed when performing RSA descryption using a private key."},{"lang":"es","value":"Las versiones de Node.js que incluyen una versión sin parches de OpenSSL o se ejecutan contra una versión vinculada dinámicamente de OpenSSL que no tiene parches son vulnerables al ataque Marvin - https://people.redhat.com/~hkario/marvin/, si se permite el relleno PCKS #1 v1.5 al realizar el descifrado RSA usando una clave privada."}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"NodeJS","product":"Node","defaultStatus":"unaffected","versions":[{"version":"4.0","lessThan":"4.*","versionType":"semver","status":"affected"},{"version":"5.0","lessThan":"5.*","versionType":"semver","status":"affected"},{"version":"6.0","lessThan":"6.*","versionType":"semver","status":"affected"},{"version":"7.0","lessThan":"7.*","versionType":"semver","status":"affected"},{"version":"8.0","lessThan":"8.*","versionType":"semver","status":"affected"},{"version":"9.0","lessThan":"9.*","versionType":"semver","status":"affected"},{"version":"10.0","lessThan":"10.*","versionType":"semver","status":"affected"},{"version":"11.0","lessThan":"11.*","versionType":"semver","status":"affected"},{"version":"12.0","lessThan":"12.*","versionType":"semver","status":"affected"},{"version":"13.0","lessThan":"13.*","versionType":"semver","status":"affected"},{"version":"14.0","lessThan":"14.*","versionType":"semver","status":"affected"},{"version":"15.0","lessThan":"15.*","versionType":"semver","status":"affected"},{"version":"16.0","lessThan":"16.*","versionType":"semver","status":"affected"},{"version":"17.0","lessThan":"17.*","versionType":"semver","status":"affected"},{"version":"18.0","lessThan":"18.19.1","versionType":"semver","status":"affected"},{"version":"19.0","lessThan":"19.*","versionType":"semver","status":"affected"},{"version":"20.0","lessThan":"20.11.1","versionType":"semver","status":"affected"},{"version":"21.0","lessThan":"21.6.2","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"nodejs","product":"nodejs","defaultStatus":"unaffected","cpes":["cpe:2.3:a:nodejs:nodejs:*:*:*:*:*:*:*:*"],"versions":[{"version":"18.0","lessThanOrEqual":"18.19.0","versionType":"semver","status":"affected"},{"version":"20.0","lessThanOrEqual":"20.11.0","versionType":"semver","status":"affected"},{"version":"21.0","lessThanOrEqual":"21.6.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-09T17:40:41.999808Z","id":"CVE-2023-46809","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-385"}]}],"references":[{"url":"https://nodejs.org/en/blog/vulnerability/february-2024-security-releases","source":"support@hackerone.com"},{"url":"https://lists.debian.org/debian-lts-announce/2024/03/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2022-49038","sourceIdentifier":"security@synology.com","published":"2024-09-26T04:15:04.940","lastModified":"2026-06-17T05:16:54.747","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"La inclusión de funcionalidad de una vulnerabilidad de esfera de control no confiable en el componente DLL de OpenSSL en Synology Drive Client anterior a 3.3.0-15082 permite a los usuarios locales ejecutar código arbitrario a través de vectores no especificados."}],"affected":[{"source":"security@synology.com","affectedData":[{"vendor":"Synology","product":"Synology Drive Client","defaultStatus":"affected","versions":[{"version":"*","lessThan":"3.5.0-16084","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"synology","product":"drive","defaultStatus":"affected","cpes":["cpe:2.3:a:synology:drive:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"3.5.0-16084","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@synology.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-26T14:51:29.735362Z","id":"CVE-2022-49038","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@synology.com","type":"Secondary","description":[{"lang":"en","value":"CWE-829"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:synology:drive_client:*:*:*:*:*:desktop:*:*","versionEndExcluding":"3.3.0-15082","matchCriteriaId":"25A1D284-49F9-4F67-B9A3-6451803B1B36"}]}]}],"references":[{"url":"https://www.synology.com/en-global/security/advisory/Synology_SA_24_10","source":"security@synology.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-9355","sourceIdentifier":"secalert@redhat.com","published":"2024-10-01T19:15:09.793","lastModified":"2026-10-29T06:17:16.250","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.  It is also possible to force a derived key to be all zeros instead of an unpredictable value.  This may have follow-on implications for the Go TLS stack."},{"lang":"es","value":"Se encontró una vulnerabilidad en Golang FIPS OpenSSL. Esta falla permite que un usuario malintencionado haga que se devuelva aleatoriamente una variable de longitud de búfer no inicializada con un búfer puesto a cero en modo FIPS. También es posible forzar una coincidencia de falso positivo entre hashes no iguales al comparar una suma hmac calculada confiable con una suma de entrada no confiable si un atacante puede enviar un búfer puesto a cero en lugar de una suma calculada previamente. También es posible forzar que una clave derivada sea todo ceros en lugar de un valor impredecible. Esto puede tener implicaciones posteriores para la pila TLS de Go."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"defaultStatus":"affected","collectionURL":"https://github.com/golang-fips/openssl","packageName":"github.com/golang-fips/openssl"},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhc-worker-script","cpes":["cpe:/o:redhat:rhel_els:7"],"versions":[{"version":"0:0.10-2.el7_9","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"go-toolset:rhel8","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"versions":[{"version":"8100020241001112709.a3795dee","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"grafana","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"versions":[{"version":"0:9.2.10-20.el8_10","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"grafana-pcp","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"versions":[{"version":"0:5.1.1-9.el8_10","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"osbuild-composer","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"versions":[{"version":"0:101.5-2.el8_10","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"osbuild-composer","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"],"versions":[{"version":"0:46.3-8.el8_6","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhc","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"],"versions":[{"version":"1:0.2.1-14.el8_6.1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"osbuild-composer","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"],"versions":[{"version":"0:46.3-8.el8_6","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhc","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"],"versions":[{"version":"1:0.2.1-14.el8_6.1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"osbuild-composer","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"],"versions":[{"version":"0:75-10.el8_8","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhc","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"],"versions":[{"version":"1:0.2.2-1.el8_8.3","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"osbuild-composer","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"],"versions":[{"version":"0:75-10.el8_8","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhc","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"],"versions":[{"version":"1:0.2.2-1.el8_8.3","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"golang","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"versions":[{"version":"0:1.21.13-4.el9_4","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"grafana","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"versions":[{"version":"0:9.2.10-19.el9_4","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"osbuild-composer","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"versions":[{"version":"0:132-1.el9","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"git-lfs","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream"],"versions":[{"version":"0:3.6.1-1.el9","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"butane","cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream"],"versions":[{"version":"0:0.17.0-1.el9_2.1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"grafana-pcp","cpes":["cpe:/a:redhat:rhel_eus:9.4::appstream"],"versions":[{"version":"0:5.1.1-4.el9_4","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"butane","cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream"],"versions":[{"version":"0:0.23.0-1.el9_6.1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Satellite Client 6 for RHEL 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"foreman_ygg_worker","cpes":["cpe:/a:redhat:rhel_satellite_client:6::el10","cpe:/a:redhat:rhel_satellite_client:6::el8","cpe:/a:redhat:rhel_satellite_client:6::el9"],"versions":[{"version":"0:0.3.1-1.el10sat","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Satellite Client 6 for RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"foreman_ygg_worker","cpes":["cpe:/a:redhat:rhel_satellite_client:6::el10","cpe:/a:redhat:rhel_satellite_client:6::el8","cpe:/a:redhat:rhel_satellite_client:6::el9"],"versions":[{"version":"0:0.3.1-1.el8sat","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Satellite Client 6 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"foreman_ygg_worker","cpes":["cpe:/a:redhat:rhel_satellite_client:6::el10","cpe:/a:redhat:rhel_satellite_client:6::el8","cpe:/a:redhat:rhel_satellite_client:6::el9"],"versions":[{"version":"0:0.3.1-1.el9sat","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Streams for Apache Kafka 2.9.0","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"golang-github-danielqsj-kafka_exporter","cpes":["cpe:/a:redhat:amq_streams:2"]},{"vendor":"Red Hat","product":"Red Hat Trusted Artifact Signer 1.3","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhtas/fulcio-rhel9","cpes":["cpe:/a:redhat:trusted_artifact_signer:1.3::el9"],"versions":[{"version":"1787305413","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"NBDE Tang Server","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"tang-operator-bundle-container","cpes":["cpe:/a:redhat:network_bound_disk_encryption_tang:1"]},{"vendor":"Red Hat","product":"OpenShift Developer Tools and Services","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"helm","cpes":["cpe:/a:redhat:ocp_tools"]},{"vendor":"Red Hat","product":"OpenShift Developer Tools and Services","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"odo","cpes":["cpe:/a:redhat:ocp_tools"]},{"vendor":"Red Hat","product":"OpenShift Pipelines","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-pipelines-client","cpes":["cpe:/a:redhat:openshift_pipelines:1"]},{"vendor":"Red Hat","product":"OpenShift Serverless","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-serverless-clients","cpes":["cpe:/a:redhat:serverless:1"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 1.2","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"helm","cpes":["cpe:/a:redhat:ansible_automation_platform"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 1.2","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-clients","cpes":["cpe:/a:redhat:ansible_automation_platform"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"automation-gateway-proxy","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"receptor","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"buildah","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"butane","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"conmon","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"containers-common","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"delve","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"git-lfs","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"golang-github-openprinting-ipp-usb","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"grafana","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"grafana-pcp","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"gvisor-tap-vsock","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ignition","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"osbuild-composer","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"podman","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rsyslog","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"skopeo","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"toolbox","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"yggdrasil","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"yggdrasil-worker-package-manager","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"host-metering","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"skopeo","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-tools:rhel8/buildah","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-tools:rhel8/conmon","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-tools:rhel8/containernetworking-plugins","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-tools:rhel8/podman","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-tools:rhel8/runc","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-tools:rhel8/skopeo","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"container-tools:rhel8/toolbox","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"git-lfs","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhc","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rsyslog","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"weldr-client","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"buildah","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"butane","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"conmon","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"containernetworking-plugins","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"grafana-pcp","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"gvisor-tap-vsock","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ignition","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"opentelemetry-collector","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"podman","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rsyslog","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"runc","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"skopeo","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"toolbox","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"weldr-client","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"buildah","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"butane","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"conmon","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"conmon-rs","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"containernetworking-plugins","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"cri-o","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"cri-tools","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"golang-github-prometheus-promu","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ignition","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"lifecycle-agent-operator-bundle-container","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"microshift","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/bare-metal-event-relay-operator-bundle","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/numaresources-operator-bundle","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/ose-aws-efs-csi-driver-container-rhel8","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/ose-gcp-filestore-csi-driver-rhel8","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/ose-secrets-store-csi-driver-rhel9","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/ose-sriov-network-metrics-exporter-rhel9","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/ose-sriov-rdma-cni-rhel9","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/ose-vertical-pod-autoscaler-rhel8","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/sriov-network-metrics-exporter-rhel9","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/topology-aware-lifecycle-manager-operator-bundle","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-clients","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ose-aws-ecr-image-credential-provider","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ose-azure-acr-image-credential-provider","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ose-gcp-gcr-image-credential-provider","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"podman","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"runc","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"skopeo","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat Openshift Container Storage 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"mcg","cpes":["cpe:/a:redhat:openshift_container_storage:4"]},{"vendor":"Red Hat","product":"Red Hat Openshift Data Foundation 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"mcg","cpes":["cpe:/a:redhat:openshift_data_foundation:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"devspaces/machineexec-rhel8","cpes":["cpe:/a:redhat:openshift_devspaces:3"]},{"vendor":"Red Hat","product":"Red Hat OpenShift GitOps","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-gitops-1/gitops-operator-bundle","cpes":["cpe:/a:redhat:openshift_gitops:1"]},{"vendor":"Red Hat","product":"Red Hat OpenShift on AWS","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rosa","cpes":["cpe:/a:redhat:openshift_service_on_aws:1"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Virtualization 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kubevirt","cpes":["cpe:/a:redhat:container_native_virtualization:4"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 16.2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"etcd","cpes":["cpe:/a:redhat:openstack:16.2"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 16.2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"golang-github-infrawatch-apputils","cpes":["cpe:/a:redhat:openstack:16.2"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 16.2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"golang-qpid-apache","cpes":["cpe:/a:redhat:openstack:16.2"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 16.2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"qpid-proton","cpes":["cpe:/a:redhat:openstack:16.2"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"etcd","cpes":["cpe:/a:redhat:openstack:17.1"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"golang-github-infrawatch-apputils","cpes":["cpe:/a:redhat:openstack:17.1"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"golang-qpid-apache","cpes":["cpe:/a:redhat:openstack:17.1"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"qpid-proton","cpes":["cpe:/a:redhat:openstack:17.1"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"qpid-proton","cpes":["cpe:/a:redhat:satellite:6"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"satellite-capsule:el8/qpid-proton","cpes":["cpe:/a:redhat:satellite:6"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"satellite:el8/qpid-proton","cpes":["cpe:/a:redhat:satellite:6"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"satellite:el8/yggdrasil-worker-forwarder","cpes":["cpe:/a:redhat:satellite:6"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"yggdrasil","cpes":["cpe:/a:redhat:satellite:6"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"yggdrasil-worker-forwarder","cpes":["cpe:/a:redhat:satellite:6"]},{"vendor":"Red Hat","product":"Red Hat Service Interconnect 1","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"qpid-proton","cpes":["cpe:/a:redhat:service_interconnect:1"]},{"vendor":"Red Hat","product":"Red Hat Service Interconnect 1","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"skupper-cli","cpes":["cpe:/a:redhat:service_interconnect:1"]},{"vendor":"Red Hat","product":"Red Hat Service Interconnect 1","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"skupper-router","cpes":["cpe:/a:redhat:service_interconnect:1"]},{"vendor":"Red Hat","product":"Red Hat Storage 3","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"heketi","cpes":["cpe:/a:redhat:storage:3"]}]}],"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":1.0,"impactScore":5.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-01T18:35:51.670441Z","id":"CVE-2024-9355","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-457"}]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:10133","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:7502","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:7550","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:8327","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:8678","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:8847","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:9551","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:2416","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:7118","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:7256","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:7624","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:55520","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:55525","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:59439","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:66016","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:68504","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:69235","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:90725","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:90726","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2024-9355","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2315719","source":"secalert@redhat.com"},{"url":"https://github.com/golang-fips/openssl/pull/198","source":"secalert@redhat.com"}]}},{"cve":{"id":"CVE-2024-41594","sourceIdentifier":"cve@mitre.org","published":"2024-10-03T19:15:04.800","lastModified":"2026-06-17T07:47:53.680","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of OpenSSL."},{"lang":"es","value":"Un problema en los dispositivos DrayTek Vigor310 hasta la versión 4.3.2.6 permite a un atacante obtener información confidencial porque el servidor httpd de la interfaz de administración de Vigor utiliza una cadena estática para inicializar el PRNG de OpenSSL."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-19T15:22:51.555504Z","id":"CVE-2024-41594","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2620_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"289E3E0B-6BA4-44B8-968A-AC374B15B631"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2620:-:*:*:*:*:*:*:*","matchCriteriaId":"5D98663B-F2F5-4ADC-9FD5-75846890EEBA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2915_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.4.5.3","matchCriteriaId":"E6E55BCE-BBF0-454B-AE86-45B7298888B3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2915:-:*:*:*:*:*:*:*","matchCriteriaId":"5860CBE4-328E-418D-9E81-1D3AF7DB8F2B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2866_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.4.5.2","matchCriteriaId":"89461FD4-897D-44F1-8486-4BCCDE3772DD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2866:-:*:*:*:*:*:*:*","matchCriteriaId":"0D0D2760-739F-4C79-AEDC-8B2CCCA2FF53"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2766_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.4.5.3","matchCriteriaId":"8F87D851-15BC-4FC1-8AB7-D5C15B2B74F0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2766:-:*:*:*:*:*:*:*","matchCriteriaId":"C0AB3C84-67CA-4531-85FB-1A56F3C93ABF"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2865_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.4.5.2","matchCriteriaId":"C3D46DEC-06AB-489F-A0B5-10C31F80A8C1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2865:-:*:*:*:*:*:*:*","matchCriteriaId":"871448C6-9183-4828-A287-05F5EC6A44F6"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2765_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.4.5.3","matchCriteriaId":"1B1826F9-0258-44DD-A471-113CF55CE563"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2765:-:*:*:*:*:*:*:*","matchCriteriaId":"60657812-D3A8-4B1B-B7BE-F629991CB053"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2763_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.4.5.3","matchCriteriaId":"1A559F44-80F8-44B7-B70F-BA0B78C85283"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2763:-:*:*:*:*:*:*:*","matchCriteriaId":"9EA9DF5D-6651-455A-9305-C42C0FF51F01"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2135_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.4.5.3","matchCriteriaId":"B4AB3320-27F8-4359-AEF8-6B1FDBA67111"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2135:-:*:*:*:*:*:*:*","matchCriteriaId":"AEDC8A7F-08CF-44D2-A9A5-A1353AF35B45"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor166_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.2.7","matchCriteriaId":"08B9436B-B2FE-4644-BB06-B0537EC23A71"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor166:-:*:*:*:*:*:*:*","matchCriteriaId":"7E33E647-5883-44FA-9915-34B89090D4E4"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor1000b_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3.2.8","matchCriteriaId":"CDBC681E-CD03-49E5-BC3A-E4A7654975A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor1000b_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0.0","versionEndExcluding":"4.4.3.1","matchCriteriaId":"ABDC93B5-DC0A-4AA4-A340-382F108AE80B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor1000b:-:*:*:*:*:*:*:*","matchCriteriaId":"9FF86645-253A-4BA3-BA2A-2725575C390D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor165_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.2.7","matchCriteriaId":"59521C99-00BA-4503-823E-3FEA44F8DDA0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor165:-:*:*:*:*:*:*:*","matchCriteriaId":"8E644893-0457-43A9-98AB-9DB37A5C415C"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor3910_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3.2.8","matchCriteriaId":"B937F11C-FC86-4D6E-A46B-BA2CA0FFCEF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor3910_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0.0","versionEndExcluding":"4.4.3.1","matchCriteriaId":"2602941C-255F-4289-9043-D396CC4B3192"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor3910:-:*:*:*:*:*:*:*","matchCriteriaId":"894E4DDA-D9BE-441D-B447-B1CE52959347"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2962_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3.2.8","matchCriteriaId":"0549C870-BE10-441A-B07D-0701915E5A9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2962_firmware:*:*:*:*:*:*:*:*","versionStartIncluding":"4.4.0.0","versionEndExcluding":"4.4.3.1","matchCriteriaId":"0D1A9825-E419-4740-996A-5928D207FCB6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2962:-:*:*:*:*:*:*:*","matchCriteriaId":"BD0C9A21-7CFE-452F-8505-834AB8579D9B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor3912_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3.6.1","matchCriteriaId":"84670562-F228-40A0-A38D-144EA62556D3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor3912:-:*:*:*:*:*:*:*","matchCriteriaId":"282E5318-DAA8-4AA2-8E7D-4B8BD9162153"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigorlte200_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E1BD8E59-6C67-4C80-B25F-2C5814A8CF0E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigorlte200:-:*:*:*:*:*:*:*","matchCriteriaId":"4DBF2015-9315-44C8-A9FE-E86146F1958E"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2133_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"43265128-7E8E-4FE2-8488-AC5734A4AF70"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2133:-:*:*:*:*:*:*:*","matchCriteriaId":"1878E59C-FB40-435D-940A-8952C56FA88B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2762_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"52F71B18-89B5-42C7-B4B7-448844D6AFBC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2762:-:*:*:*:*:*:*:*","matchCriteriaId":"3873B2B9-95C1-4F00-9165-7C4D2A90CDE5"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2832_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"A96F64C0-09DD-4553-AC5F-D722B8321B0D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2832:-:*:*:*:*:*:*:*","matchCriteriaId":"B0978465-D59F-4C0A-A29F-5D7BE58BA557"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2860_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F2C4077B-C73F-4431-9103-C09960E203E1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2860:-:*:*:*:*:*:*:*","matchCriteriaId":"266C73DE-BFC6-4F3E-B022-559B3971CA44"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2862_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"9D081E5D-7A68-47A0-9EFE-1FC01DA2FF23"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2862:-:*:*:*:*:*:*:*","matchCriteriaId":"8B01EDAE-BB9E-4431-BE8C-6505BA7CA42D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2925_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"6C470B04-BD57-429B-80FC-328A7D2E35E5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2925:-:*:*:*:*:*:*:*","matchCriteriaId":"7536B29C-2030-4331-B8BF-D269D86D199B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2926_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3A688631-4B36-43CC-AEF8-D390081F01DC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2926:-:*:*:*:*:*:*:*","matchCriteriaId":"AF1B117B-603D-493C-A804-C18ED332A221"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor2952_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E207BB52-29F8-4F2F-AA06-855B38E22958"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor2952:-:*:*:*:*:*:*:*","matchCriteriaId":"167336E2-AAA8-4424-AB07-2D7C9E1542B3"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:draytek:vigor3220_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"CD8437FD-65E2-4203-82B9-8FC32444204A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:draytek:vigor3220:-:*:*:*:*:*:*:*","matchCriteriaId":"64955940-3998-4B76-92D1-D9F3FAB874B4"}]}]}],"references":[{"url":"https://www.forescout.com/resources/draybreak-draytek-research/","source":"cve@mitre.org","tags":["Mitigation","Technical Description","Third Party Advisory"]},{"url":"https://www.forescout.com/resources/draytek14-vulnerabilities","source":"cve@mitre.org","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2024-4741","sourceIdentifier":"openssl-security@openssl.org","published":"2024-11-13T11:15:04.480","lastModified":"2026-06-17T08:02:32.007","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."},{"lang":"es","value":"Resumen del problema: Llamar a la función de API de OpenSSL SSL_free_buffers puede provocar que se acceda a la memoria que se liberó previamente en algunas situaciones Resumen del impacto: Un use after free puede tener una variedad de posibles consecuencias, como la corrupción de datos válidos, fallas o ejecución de código arbitrario. Sin embargo, solo las aplicaciones que llaman directamente a la función SSL_free_buffers se ven afectadas por este problema. Las aplicaciones que no llaman a esta función no son vulnerables. Nuestras investigaciones indican que las aplicaciones rara vez usan esta función. La función SSL_free_buffers se usa para liberar el búfer interno de OpenSSL que se usa al procesar un registro entrante de la red. Solo se espera que la llamada tenga éxito si el búfer no está actualmente en uso. Sin embargo, se han identificado dos escenarios en los que el búfer se libera incluso cuando todavía está en uso. El primer escenario ocurre cuando se recibió un encabezado de registro de la red y OpenSSL lo procesó, pero aún no llegó el cuerpo completo del registro. En este caso, llamar a SSL_free_buffers tendrá éxito incluso si un registro solo se procesó parcialmente y el búfer todavía está en uso. El segundo escenario ocurre cuando OpenSSL ha recibido y procesado un registro completo que contiene datos de la aplicación, pero la aplicación solo ha leído parte de estos datos. Nuevamente, una llamada a SSL_free_buffers tendrá éxito aunque el búfer aún esté en uso. Si bien estos escenarios podrían ocurrir accidentalmente durante el funcionamiento normal, un atacante malintencionado podría intentar crear una situación en la que esto ocurra. No tenemos conocimiento de que este problema se esté explotando activamente. Los módulos FIPS en 3.3, 3.2, 3.1 y 3.0 no se ven afectados por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.3.0","lessThan":"3.3.1","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThan":"3.2.2","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThan":"3.1.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.14","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1y","versionType":"custom","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"openssl","product":"openssl","defaultStatus":"unknown","cpes":["cpe:2.3:a:openssl:openssl:-:*:*:*:*:*:*:*"],"versions":[{"version":"1.1.1","lessThan":"1.1.1y","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.14","versionType":"semver","status":"affected"},{"version":"3.1.0","lessThan":"3.1.6","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThan":"3.2.2","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-13T14:45:07.092438Z","id":"CVE-2024-4741","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8","source":"openssl-security@openssl.org"},{"url":"https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4","source":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20240528.txt","source":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240621-0004/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2024-28885","sourceIdentifier":"secure@intel.com","published":"2024-11-13T21:15:14.853","lastModified":"2026-06-17T07:21:58.020","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Observable discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access."},{"lang":"es","value":"Una discrepancia observable en algunos programas Intel(R) QAT Engine para OpenSSL anteriores a la versión v1.6.1 puede permitir la divulgación de información a través del acceso a la red."}],"affected":[{"source":"secure@intel.com","affectedData":[{"vendor":"n/a","product":"Intel(R) QAT Engine for OpenSSL software","defaultStatus":"unaffected","versions":[{"version":"before version v1.6.1","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@intel.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"secure@intel.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-14T15:09:10.363216Z","id":"CVE-2024-28885","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secure@intel.com","type":"Secondary","description":[{"lang":"en","value":"CWE-203"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01177.html","source":"secure@intel.com"}]}},{"cve":{"id":"CVE-2024-31074","sourceIdentifier":"secure@intel.com","published":"2024-11-13T21:15:16.790","lastModified":"2026-06-17T07:27:44.660","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Observable timing discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access."},{"lang":"es","value":"Una discrepancia de tiempo observable en algunos programas Intel(R) QAT Engine para OpenSSL anteriores a la versión v1.6.1 puede permitir la divulgación de información a través del acceso a la red."}],"affected":[{"source":"secure@intel.com","affectedData":[{"vendor":"n/a","product":"Intel(R) QAT Engine for OpenSSL software","defaultStatus":"unaffected","versions":[{"version":"before version v1.6.1","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@intel.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"secure@intel.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-14T15:09:08.663082Z","id":"CVE-2024-31074","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secure@intel.com","type":"Secondary","description":[{"lang":"en","value":"CWE-208"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01177.html","source":"secure@intel.com"}]}},{"cve":{"id":"CVE-2024-33617","sourceIdentifier":"secure@intel.com","published":"2024-11-13T21:15:19.243","lastModified":"2026-06-17T07:32:05.813","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access."},{"lang":"es","value":"La gestión insuficiente del flujo de control en algunos programas Intel(R) QAT Engine para OpenSSL anteriores a la versión v1.6.1 puede permitir la divulgación de información a través del acceso a la red."}],"affected":[{"source":"secure@intel.com","affectedData":[{"vendor":"n/a","product":"Intel(R) QAT Engine for OpenSSL software","defaultStatus":"unaffected","versions":[{"version":"before version v1.6.1","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@intel.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"secure@intel.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-14T15:09:11.679555Z","id":"CVE-2024-33617","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secure@intel.com","type":"Secondary","description":[{"lang":"en","value":"CWE-691"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01177.html","source":"secure@intel.com"}]}},{"cve":{"id":"CVE-2023-24010","sourceIdentifier":"cve-coordination@incibe.es","published":"2025-01-09T15:15:11.467","lastModified":"2026-06-17T05:38:28.257","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS#7 certificate’s validation. This is caused by a non-compliant implementation of permission document verification used by some DDS vendors. Specifically, an improper use of the OpenSSL PKCS7_verify function used to validate S/MIME signatures."},{"lang":"es","value":"Un atacante puede manipular de forma arbitraria participantes maliciosos de DDS (o nodos ROS 2) con certificados válidos para comprometer y obtener el control total del sistema de bus de datos DDS seguro atacado explotando atributos vulnerables en la configuración de validación del certificado PKCS#7. Esto se debe a una implementación no conforme de la verificación de documentos de permiso utilizada por algunos proveedores de DDS. En concreto, un uso indebido de la función PKCS7_verify de OpenSSL utilizada para validar firmas S/MIME."}],"affected":[{"source":"cve-coordination@incibe.es","affectedData":[{"vendor":"eProsima","product":"DDS","defaultStatus":"unaffected","packageName":"sros2","versions":[{"version":"all versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve-coordination@incibe.es","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-09T15:29:56.704739Z","id":"CVE-2023-24010","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve-coordination@incibe.es","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"references":[{"url":"https://gist.github.com/vmayoral/235c02d0b0ef85a29812eff6980ff80d","source":"cve-coordination@incibe.es"},{"url":"https://github.com/ros2/sros2/issues/282","source":"cve-coordination@incibe.es"},{"url":"https://gist.github.com/vmayoral/235c02d0b0ef85a29812eff6980ff80d","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2023-24011","sourceIdentifier":"cve-coordination@incibe.es","published":"2025-01-09T15:15:11.657","lastModified":"2026-06-17T05:38:28.400","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS#7 certificate’s validation. This is caused by a non-compliant implementation of permission document verification used by some DDS vendors. Specifically, an improper use of the OpenSSL PKCS7_verify function used to validate S/MIME signatures."},{"lang":"es","value":"Un atacante puede manipular de forma arbitraria participantes maliciosos de DDS (o nodos ROS 2) con certificados válidos para comprometer y obtener el control total del sistema de bus de datos DDS seguro atacado explotando atributos vulnerables en la configuración de validación del certificado PKCS#7. Esto se debe a una implementación no conforme de la verificación de documentos de permiso utilizada por algunos proveedores de DDS. En concreto, un uso indebido de la función PKCS7_verify de OpenSSL utilizada para validar firmas S/MIME."}],"affected":[{"source":"cve-coordination@incibe.es","affectedData":[{"vendor":"ZettaScale","product":"DDS","defaultStatus":"unaffected","packageName":"sros2","versions":[{"version":"all versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve-coordination@incibe.es","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-09T15:28:56.515535Z","id":"CVE-2023-24011","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve-coordination@incibe.es","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"references":[{"url":"https://gist.github.com/vmayoral/235c02d0b0ef85a29812eff6980ff80d","source":"cve-coordination@incibe.es"},{"url":"https://github.com/ros2/sros2/issues/282","source":"cve-coordination@incibe.es"},{"url":"https://gist.github.com/vmayoral/235c02d0b0ef85a29812eff6980ff80d","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2023-24012","sourceIdentifier":"cve-coordination@incibe.es","published":"2025-01-09T15:15:11.810","lastModified":"2026-06-17T05:38:28.530","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS#7 certificate’s validation. This is caused by a non-compliant implementation of permission document verification used by some DDS vendors. Specifically, an improper use of the OpenSSL PKCS7_verify function used to validate S/MIME signatures."},{"lang":"es","value":"Un atacante puede manipular de forma arbitraria participantes maliciosos de DDS (o nodos ROS 2) con certificados válidos para comprometer y obtener el control total del sistema de bus de datos DDS seguro atacado explotando atributos vulnerables en la configuración de validación del certificado PKCS#7. Esto se debe a una implementación no conforme de la verificación de documentos de permiso utilizada por algunos proveedores de DDS. En concreto, un uso indebido de la función PKCS7_verify de OpenSSL utilizada para validar firmas S/MIME."}],"affected":[{"source":"cve-coordination@incibe.es","affectedData":[{"vendor":"OpenDDS","product":"DDS","defaultStatus":"unaffected","packageName":"sros2","versions":[{"version":"all versions","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve-coordination@incibe.es","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-09T15:26:41.359181Z","id":"CVE-2023-24012","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve-coordination@incibe.es","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"references":[{"url":"https://gist.github.com/vmayoral/235c02d0b0ef85a29812eff6980ff80d","source":"cve-coordination@incibe.es"},{"url":"https://github.com/ros2/sros2/issues/282","source":"cve-coordination@incibe.es"},{"url":"https://gist.github.com/vmayoral/235c02d0b0ef85a29812eff6980ff80d","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2024-13454","sourceIdentifier":"security@openvpn.net","published":"2025-01-20T21:15:21.453","lastModified":"2026-06-17T07:02:02.780","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the private CA key when created using OpenSSL 3"},{"lang":"es","value":"El algoritmo de cifrado débil en Easy-RSA versión 3.0.5 a 3.1.7 permite que un atacante local ataque con fuerza bruta más fácilmente la clave CA privada cuando se crea usando OpenSSL 3."}],"affected":[{"source":"security@openvpn.net","affectedData":[{"vendor":"OpenVPN","product":"Easy-RSA","defaultStatus":"unaffected","versions":[{"version":"3.0.5","lessThanOrEqual":"3.1.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-21T19:58:10.500367Z","id":"CVE-2024-13454","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@openvpn.net","type":"Secondary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openvpn:easy-rsa:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.5","versionEndIncluding":"3.1.7","matchCriteriaId":"E61AFF18-33D2-4416-B512-0E32D70F3142"}]}]}],"references":[{"url":"https://community.openvpn.net/openvpn/wiki/CVE-2024-13454","source":"security@openvpn.net","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2024-2658","sourceIdentifier":"PSIRT-CNA@flexerasoftware.com","published":"2025-01-30T17:15:17.670","lastModified":"2026-06-17T07:24:59.037","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configuration file to load from a non-existent directory. An unauthorized, locally authenticated user with low privileges can potentially create the directory and load a specially crafted openssl.conf file leading to the execution of a malicious DLL (Dynamic-Link Library) with elevated privileges."},{"lang":"es","value":"Una configuración incorrecta en lmadmin.exe de las versiones de FlexNet Publisher anteriores a 2024 R1 (11.19.6.0) permite que el archivo de configuración de OpenSSL se cargue desde un directorio inexistente. Un usuario no autorizado, autenticado localmente y con privilegios bajos puede crear el directorio y cargar un archivo openssl.conf manipulado especial, lo que lleva a la ejecución de una DLL maliciosa (Dynamic-Link librería) con privilegios elevados."}],"affected":[{"source":"PSIRT-CNA@flexerasoftware.com","affectedData":[{"vendor":"Flexera","product":"FlexNet Publisher","defaultStatus":"unaffected","platforms":["Windows"],"versions":[{"version":"0","lessThan":"2024 R1 (11.19.6.0)","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"PSIRT-CNA@flexerasoftware.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.5,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-30T19:22:23.235896Z","id":"CVE-2024-2658","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"PSIRT-CNA@flexerasoftware.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"references":[{"url":"https://community.flexera.com/s/article/cve-2024-2658-flexnet-publisher-potential-local-privilege-escalation-issue","source":"PSIRT-CNA@flexerasoftware.com"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-24-359/","source":"PSIRT-CNA@flexerasoftware.com"}]}},{"cve":{"id":"CVE-2025-24898","sourceIdentifier":"security-advisories@github.com","published":"2025-02-03T18:15:43.077","lastModified":"2026-06-17T08:59:48.490","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer but with a lifetime bound to the `client` argument. In situations where the `sever` buffer's lifetime is shorter than the `client` buffer's, this can cause a use after free. This could cause the server to crash or to return arbitrary memory contents to the client. The crate`openssl` version 0.10.70 fixes the signature of `ssl::select_next_proto` to properly constrain the output buffer's lifetime to that of both input buffers. Users are advised to upgrade. In standard usage of `ssl::select_next_proto` in the callback passed to `SslContextBuilder::set_alpn_select_callback`, code is only affected if the `server` buffer is constructed *within* the callback."},{"lang":"es","value":"rust-openssl es un conjunto de enlaces OpenSSL para el lenguaje de programación Rust. En las versiones afectadas, `ssl::select_next_proto` puede devolver un fragmento que apunta al búfer del argumento `server` pero con un tiempo de vida vinculado al argumento `client`. En situaciones en las que el tiempo de vida del búfer `sever` es más corto que el del `client`, esto puede provocar un use after free. Esto podría provocar que el servidor se bloquee o que devuelva contenido de memoria arbitrario al cliente. La versión 0.10.70 del paquete `openssl` corrige la firma de `ssl::select_next_proto` para restringir adecuadamente el tiempo de vida del búfer de salida al de ambos búferes de entrada. Se recomienda a los usuarios que actualicen. En el uso estándar de `ssl::select_next_proto` en la devolución de llamada pasada a `SslContextBuilder::set_alpn_select_callback`, el código solo se ve afectado si el búfer `servidor` se construye *dentro* de la devolución de llamada."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"sfackler","product":"rust-openssl","versions":[{"version":">= 0.10.0, < 0.10.70","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-03T18:16:43.147824Z","id":"CVE-2025-24898","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"references":[{"url":"https://crates.io/crates/openssl","source":"security-advisories@github.com"},{"url":"https://github.com/sfackler/rust-openssl/pull/2360","source":"security-advisories@github.com"},{"url":"https://github.com/sfackler/rust-openssl/security/advisories/GHSA-rpmj-rpgj-qmpm","source":"security-advisories@github.com"},{"url":"https://lists.debian.org/debian-lts-announce/2025/02/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2024-12797","sourceIdentifier":"openssl-security@openssl.org","published":"2025-02-11T16:15:38.827","lastModified":"2026-06-17T07:00:30.890","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a\nserver may fail to notice that the server was not authenticated, because\nhandshakes don't abort as expected when the SSL_VERIFY_PEER verification mode\nis set.\n\nImpact summary: TLS and DTLS connections using raw public keys may be\nvulnerable to man-in-middle attacks when server authentication failure is not\ndetected by clients.\n\nRPKs are disabled by default in both TLS clients and TLS servers.  The issue\nonly arises when TLS clients explicitly enable RPK use by the server, and the\nserver, likewise, enables sending of an RPK instead of an X.509 certificate\nchain.  The affected clients are those that then rely on the handshake to\nfail when the server's RPK fails to match one of the expected public keys,\nby setting the verification mode to SSL_VERIFY_PEER.\n\nClients that enable server-side raw public keys can still find out that raw\npublic key verification failed by calling SSL_get_verify_result(), and those\nthat do, and take appropriate action, are not affected.  This issue was\nintroduced in the initial implementation of RPK support in OpenSSL 3.2.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."},{"lang":"es","value":"Resumen del problema: los clientes que utilizan claves públicas sin procesar (RPK) RFC7250 para autenticar un servidor pueden no darse cuenta de que el servidor no se ha autenticado, porque los protocolos de enlace no se cancelan como se espera cuando se establece el modo de verificación SSL_VERIFY_PEER. Resumen del impacto: las conexiones TLS y DTLS que utilizan claves públicas sin procesar pueden ser vulnerables a ataques de intermediarios cuando los clientes no detectan un error de autenticación del servidor. Las RPK están deshabilitadas de forma predeterminada tanto en los clientes TLS como en los servidores TLS. El problema solo surge cuando los clientes TLS habilitan explícitamente el uso de RPK por parte del servidor y el servidor, a su vez, habilita el envío de una RPK en lugar de una cadena de certificados X.509. Los clientes afectados son aquellos que dependen de que el protocolo de enlace falle cuando la RPK del servidor no coincide con una de las claves públicas esperadas, al establecer el modo de verificación en SSL_VERIFY_PEER. Los clientes que habilitan claves públicas sin procesar del lado del servidor aún pueden descubrir que la verificación de clave pública sin procesar falló al llamar a SSL_get_verify_result(), y aquellos que lo hacen y toman las medidas adecuadas no se ven afectados. Este problema se introdujo en la implementación inicial de la compatibilidad con RPK en OpenSSL 3.2. Los módulos FIPS en 3.4, 3.3, 3.2, 3.1 y 3.0 no se ven afectados por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.4.0","lessThan":"3.4.1","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.3","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThan":"3.2.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-14T20:24:14.595864Z","id":"CVE-2024-12797","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-392"}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699","source":"openssl-security@openssl.org"},{"url":"https://openssl-library.org/news/secadv/20250211.txt","source":"openssl-security@openssl.org"},{"url":"http://www.openwall.com/lists/oss-security/2025/02/11/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2025/02/11/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20250214-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2025-2263","sourceIdentifier":"vulnreport@tenable.com","published":"2025-03-13T17:15:38.617","lastModified":"2026-06-17T09:06:39.173","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"During login to the web server in \"Sante PACS Server.exe\", OpenSSL function EVP_DecryptUpdate is called to decrypt the username and password. A fixed 0x80-byte stack-based buffer is passed to the function as the output buffer. A stack-based buffer overflow exists if a long encrypted username or password is supplied by an unauthenticated remote attacker."},{"lang":"es","value":"Al iniciar sesión en el servidor web en \"Sante PACS Server.exe\", se llama a la función OpenSSL EVP_DecryptUpdate para descifrar el nombre de usuario y la contraseña. Se pasa a la función un búfer fijo de pila de 0x80 bytes como búfer de salida. Se produce un desbordamiento de búfer de pila si un atacante remoto no autenticado proporciona un nombre de usuario o una contraseña cifrados largos."}],"affected":[{"source":"vulnreport@tenable.com","affectedData":[{"vendor":"Santesoft","product":"Sante PACS Server","defaultStatus":"unaffected","versions":[{"version":"4.1.0","status":"affected"},{"version":"4.2.0","status":"unaffected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"vulnreport@tenable.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-14T13:41:46.478554Z","id":"CVE-2025-2263","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"vulnreport@tenable.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:santesoft:sante_pacs_server:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"94D12F49-C02A-4B31-B215-387260205DB3"}]}]}],"references":[{"url":"https://www.tenable.com/security/research/tra-2025-08","source":"vulnreport@tenable.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2025-08","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-3416","sourceIdentifier":"secalert@redhat.com","published":"2025-04-08T19:15:53.717","lastModified":"2026-06-30T07:16:31.330","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string."},{"lang":"es","value":"Se detectó una falla en el gestionamiento del argumento de propiedades por parte de OpenSSL en ciertas funciones. Esta vulnerabilidad puede permitir la explotación de la función \"use after free\", lo que puede resultar en un comportamiento indefinido o un análisis incorrecto de las propiedades, lo que hace que OpenSSL trate la entrada como una cadena vacía."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"defaultStatus":"unaffected","collectionURL":"https://github.com/sfackler/rust-openssl","packageName":"rust-openssl","versions":[{"version":"0.10.39","lessThan":"0.10.72","versionType":"semver","status":"affected"}]},{"vendor":"Red Hat","product":"Red Hat Directory Server 11","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-ds:11/389-ds-base","cpes":["cpe:/a:redhat:directory_server:11"]},{"vendor":"Red Hat","product":"Red Hat Directory Server 12","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"redhat-ds:12/389-ds-base","cpes":["cpe:/a:redhat:directory_server:12"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"firefox","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"gjs","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rpm-ostree","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"firefox","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds:1.4/389-ds-base","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"firefox","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"mingw-openssl","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"mozjs60","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python3.12-cryptography","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rpm-ostree","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"389-ds-base","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"firefox","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"firefox:flatpak/firefox","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"gjs","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"keylime-agent-rust","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"polkit","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python3.12-cryptography","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rpm-ostree","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rust-bootupd","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kata-containers","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rpm-ostree","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat Trusted Artifact Signer","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhtas/tuffer-rhel9","cpes":["cpe:/a:redhat:trusted_artifact_signer:1"]},{"vendor":"Red Hat","product":"Red Hat Trusted Artifact Signer","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhtas/tuftool-rhel9","cpes":["cpe:/a:redhat:trusted_artifact_signer:1"]},{"vendor":"Red Hat","product":"Red Hat Trusted Profile Analyzer","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhtpa/rhtpa-trustification-service-rhel9","cpes":["cpe:/a:redhat:trusted_profile_analyzer:1"]}]}],"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-08T19:02:06.643346Z","id":"CVE-2025-3416","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-3416","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357560","source":"secalert@redhat.com"},{"url":"https://github.com/sfackler/rust-openssl","source":"secalert@redhat.com"},{"url":"https://github.com/sfackler/rust-openssl/commit/87085bd67896b7f92e6de35d081f607a334beae4","source":"secalert@redhat.com"},{"url":"https://github.com/sfackler/rust-openssl/pull/2390","source":"secalert@redhat.com"},{"url":"https://rustsec.org/advisories/RUSTSEC-2025-0022.html","source":"secalert@redhat.com"}]}},{"cve":{"id":"CVE-2025-23253","sourceIdentifier":"psirt@nvidia.com","published":"2025-04-22T19:15:51.827","lastModified":"2026-06-17T08:52:56.770","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constant issue by copying a malicious DLL in a hard-coded path. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering."},{"lang":"es","value":"El servicio NVIDIA NvContainer para Windows contiene una vulnerabilidad en el uso de OpenSSL. Un atacante podría explotar un problema constante codificado copiando una DLL maliciosa en una ruta codificada. Una explotación exitosa de esta vulnerabilidad podría provocar ejecución de código, denegación de servicio, escalada de privilegios, divulgación de información o manipulación de datos."}],"affected":[{"source":"psirt@nvidia.com","affectedData":[{"vendor":"NVIDIA","product":"NVIDIA App","defaultStatus":"unaffected","platforms":["Windows"],"versions":[{"version":"All versions up to and including 11.0.2.337 (prod2 hotfix)","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@nvidia.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","baseScore":2.5,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":1.0,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-22T18:53:59.464030Z","id":"CVE-2025-23253","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@nvidia.com","type":"Secondary","description":[{"lang":"en","value":"CWE-547"}]}],"references":[{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5644","source":"psirt@nvidia.com"}]}},{"cve":{"id":"CVE-2025-2768","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-04-23T17:16:54.777","lastModified":"2026-06-17T09:07:35.607","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25041."},{"lang":"es","value":"Vulnerabilidad de escalada de privilegios locales en el elemento de ruta de búsqueda no controlada de Bdrive NetDrive. Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Bdrive NetDrive. Para explotar esta vulnerabilidad, un atacante debe primero ejecutar código con pocos privilegios en el sistema objetivo. La falla específica se encuentra en la configuración de OpenSSL. El producto carga un archivo de configuración de OpenSSL desde una ubicación no segura. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto de SYSTEM. Era ZDI-CAN-25041."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Bdrive","product":"NetDrive","defaultStatus":"unknown","versions":[{"version":"3.17.960","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T18:02:59.090488Z","id":"CVE-2025-2768","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bdrive:netdrive:3.17.960:*:*:*:*:*:*:*","matchCriteriaId":"86905874-D713-4AB8-A7D1-3D50CC324FF6"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-182/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-2769","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-04-23T17:16:54.903","lastModified":"2026-06-17T09:07:35.710","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25295."},{"lang":"es","value":"Vulnerabilidad de escalada de privilegios locales en el elemento de ruta de búsqueda no controlada de Bdrive NetDrive. Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Bdrive NetDrive. Para explotar esta vulnerabilidad, un atacante debe primero ejecutar código con pocos privilegios en el sistema objetivo. La falla específica se encuentra en la configuración de OpenSSL. El producto carga un archivo de configuración de OpenSSL desde una ubicación no segura. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto de SYSTEM. Anteriormente, se denominaba ZDI-CAN-25295."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Bdrive","product":"NetDrive","defaultStatus":"unknown","versions":[{"version":"3.17.960","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T17:59:34.384971Z","id":"CVE-2025-2769","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bdrive:netdrive:3.17.960:*:*:*:*:*:*:*","matchCriteriaId":"86905874-D713-4AB8-A7D1-3D50CC324FF6"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-183/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-46551","sourceIdentifier":"security-advisories@github.com","published":"2025-05-07T17:15:58.153","lastModified":"2026-06-17T09:26:36.930","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"JRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library. Starting in JRuby-OpenSSL version 0.12.1 and prior to version 0.15.4 (corresponding to JRuby versions starting in 9.3.4.0 prior to 9.4.12.1 and 10.0.0.0 prior to 10.0.0.1), when verifying SSL certificates, JRuby-OpenSSL does not verify that the hostname presented in the certificate matches the one the user tries to connect to. This means a man-in-the-middle could just present any valid cert for a completely different domain they own, and JRuby would accept the cert. Anybody using JRuby to make requests of external APIs, or scraping the web, that depends on https to connect securely. JRuby-OpenSSL version 0.15.4 contains a fix for the issue. This fix is included in JRuby versions 10.0.0.1 and 9.4.12.1."},{"lang":"es","value":"JRuby-OpenSSL es una gema complementaria para JRuby que emula la librería nativa Ruby OpenSSL. A partir de la versión 0.12.1 de JRuby-OpenSSL y anteriores a la 0.15.4 (correspondientes a las versiones de JRuby 9.3.4.0 anteriores a la 9.4.12.1 y 10.0.0.0 anteriores a la 10.0.0.1), al verificar certificados SSL, JRuby-OpenSSL no verifica que el nombre de host presentado en el certificado coincida con el del usuario al que intenta conectarse. Esto significa que un intermediario podría presentar cualquier certificado válido para un dominio completamente diferente al suyo, y JRuby lo aceptaría. Cualquiera que use JRuby para realizar solicitudes a API externas o para rastrear datos web que dependan de https para conectarse de forma segura. La versión 0.15.4 de JRuby-OpenSSL contiene una solución para este problema. Esta corrección está incluida en las versiones 10.0.0.1 y 9.4.12.1 de JRuby."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"jruby","product":"jruby-openssl","versions":[{"version":">= 0.12.1, < 0.15.4","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.7,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-07T20:15:30.815503Z","id":"CVE-2025-46551","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jruby:jruby:*:*:*:*:*:*:*:*","versionStartIncluding":"9.3.4.0","versionEndExcluding":"9.4.12.1","matchCriteriaId":"D217AD9C-EA41-4AA8-A3E3-EA3483EA2DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jruby:jruby:10.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5BDF8AF0-D6E3-4FAA-8236-792675DD7F58"},{"vulnerable":true,"criteria":"cpe:2.3:a:jruby:jruby-openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"0.12.1","versionEndExcluding":"0.15.4","matchCriteriaId":"223D72E4-9CD6-4B53-9B98-6C34E0ABFE60"}]}]}],"references":[{"url":"https://github.com/jruby/jruby-openssl/commit/31a56d690ce9b8af47af09aaaf809081949ed285","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/jruby/jruby-openssl/security/advisories/GHSA-72qj-48g4-5xgx","source":"security-advisories@github.com","tags":["Exploit","Vendor Advisory"]},{"url":"https://github.com/jruby/jruby-openssl/security/advisories/GHSA-72qj-48g4-5xgx","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-35471","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","published":"2025-05-13T02:15:17.607","lastModified":"2026-06-17T09:14:18.337","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privileged local user can execute arbitrary code with the privileges of the user or process loading openssl-feedstock DLLs. Miniforge before 24.5.0 is also affected."},{"lang":"es","value":"Conda-forge openssl-feedstock anterior a la versión 066e83c (20/05/2024), en Microsoft Windows, configura OpenSSL para usar una ruta de archivo OPENSSLDIR accesible para usuarios locales sin privilegios. Al escribir un archivo openssl.cnf especialmente manipulado en OPENSSLDIR, un usuario local sin privilegios puede ejecutar código arbitrario con sus privilegios o procesar la carga de DLL de openssl-feedstock. Miniforge anterior a la versión 24.5.0 también se ve afectado."}],"affected":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","affectedData":[{"vendor":"conda-forge","product":"openssl-feedstock","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"066e83c","versionType":"git","status":"affected"},{"version":"066e83c","status":"unaffected"}]},{"vendor":"conda-forge","product":"miniforge","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"24.5.0","versionType":"custom","status":"affected"},{"version":"24.5.0","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"PASSIVE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","ssvcData":{"timestamp":"2025-05-12T16:29:52.839531Z","id":"CVE-2025-35471","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-22T19:32:29.175073Z","id":"CVE-2025-35471","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9119a7d8-5eab-497f-8521-727c672e3725","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:conda-forge:miniforge:*:*:*:*:*:*:*:*","versionEndExcluding":"24.5.0","matchCriteriaId":"F6660A5C-90B3-4C37-BAC6-0FC79E19C4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:conda-forge:openssl-feedstock:*:*:*:*:*:*:*:*","versionEndExcluding":"2024-05-20","matchCriteriaId":"F688C287-6E12-4CD3-8F7E-E039E669AA56"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://github.com/conda-forge/openssl-feedstock/commit/066e83c5226bafe90a9c0575b077ce30cd5f5921","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Patch"]},{"url":"https://github.com/conda-forge/openssl-feedstock/issues/201","source":"9119a7d8-5eab-497f-8521-727c672e3725","tags":["Exploit","Issue Tracking"]}]}},{"cve":{"id":"CVE-2025-47276","sourceIdentifier":"security-advisories@github.com","published":"2025-05-13T16:15:32.037","lastModified":"2026-06-17T09:27:39.153","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Actualizer is a single shell script solution to allow developers and embedded engineers to create Debian operating systems (OS). Prior to version 1.2.0, Actualizer uses OpenSSL's  \"-passwd\" function, which uses SHA512 instead of a more suitable password hasher like Yescript/Argon2i. All Actualizer users building a full Debian Operating System are affected. Users should upgrade to version 1.2.0 of Actualizer. Existing OS deployment requires manual password changes against the alpha and root accounts. The change will deploy's Debian's yescript overriding the older SHA512 hash created by OpenSSL. As a workaround, users need to reset both `root` and \"Alpha\" users' passwords."},{"lang":"es","value":"Actualizer es una solución de script de shell único que permite a desarrolladores e ingenieros de sistemas integrados crear sistemas operativos Debian (SO). Antes de la versión 1.2.0, Actualizer utilizaba la función \"-passwd\" de OpenSSL, que utiliza SHA512 en lugar de un hash de contraseñas más adecuado como Yescript/Argon2i. Todos los usuarios de Actualizer que creen un sistema operativo Debian completo se ven afectados. Los usuarios deben actualizar a la versión 1.2.0 de Actualizer. La implementación actual del SO requiere cambios manuales de contraseñas para las cuentas alfa y root. El cambio implementará el yescript de Debian, anulando el hash SHA512 anterior creado por OpenSSL. Como workaround, los usuarios deben restablecer las contraseñas de los usuarios `root` y `Alpha`."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"ChewKeanHo","product":"Actualizer","versions":[{"version":"< 1.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-13T19:31:14.270803Z","id":"CVE-2025-47276","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-328"}]}],"references":[{"url":"https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html","source":"security-advisories@github.com"},{"url":"https://github.com/ChewKeanHo/Actualizer/commit/32c9cc232c856f078f8269fba80ce7562bbff86b","source":"security-advisories@github.com"},{"url":"https://github.com/ChewKeanHo/Actualizer/issues/1","source":"security-advisories@github.com"},{"url":"https://github.com/ChewKeanHo/Actualizer/releases/tag/v1.2.0","source":"security-advisories@github.com"},{"url":"https://github.com/ChewKeanHo/Actualizer/security/advisories/GHSA-v626-chv9-v9qr","source":"security-advisories@github.com"},{"url":"https://github.com/openssl/openssl/issues/19340","source":"security-advisories@github.com"},{"url":"https://www.reddit.com/r/debian/comments/1kknzqi/actualizer_v110_upgraded","source":"security-advisories@github.com"}]}},{"cve":{"id":"CVE-2025-4575","sourceIdentifier":"openssl-security@openssl.org","published":"2025-05-22T14:16:07.630","lastModified":"2026-06-17T09:33:33.093","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Use of -addreject option with the openssl x509 application adds\na trusted use instead of a rejected use for a certificate.\n\nImpact summary: If a user intends to make a trusted certificate rejected for\na particular use it will be instead marked as trusted for that use.\n\nA copy & paste error during minor refactoring of the code introduced this\nissue in the OpenSSL 3.5 version. If, for example, a trusted CA certificate\nshould be trusted only for the purpose of authenticating TLS servers but not\nfor CMS signature verification and the CMS signature verification is intended\nto be marked as rejected with the -addreject option, the resulting CA\ncertificate will be trusted for CMS signature verification purpose instead.\n\nOnly users which use the trusted certificate format who use the openssl x509\ncommand line application to add rejected uses are affected by this issue.\nThe issues affecting only the command line application are considered to\nbe Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue.\n\nOpenSSL 3.4, 3.3, 3.2, 3.1, 3.0, 1.1.1 and 1.0.2 are also not affected by this\nissue."},{"lang":"es","value":"Resumen del problema: El uso de la opción -addreject con la aplicación openssl x509 añade un uso confiable en lugar de uno rechazado para un certificado. Resumen del impacto: Si un usuario intenta rechazar un certificado confiable para un uso específico, se marcará como confiable para ese uso. Un error de copiar y pegar durante una pequeña refactorización del código introdujo este problema en la versión OpenSSL 3.5. Si, por ejemplo, un certificado de CA confiable solo debe ser confiable para autenticar servidores TLS, pero no para la verificación de firmas CMS, y esta verificación se marca como rechazada con la opción -addreject, el certificado de CA resultante se considerará confiable para la verificación de firmas CMS. Este problema solo afecta a los usuarios que usan el formato de certificado confiable y la aplicación de línea de comandos openssl x509 para añadir usos rechazados. Los problemas que afectan solo a la aplicación de línea de comandos se consideran de gravedad baja. Los módulos FIPS de las versiones 3.5, 3.4, 3.3, 3.2, 3.1 y 3.0 no se ven afectados. OpenSSL 3.4, 3.3, 3.2, 3.1, 3.0, 1.1.1 y 1.0.2 tampoco se ven afectados por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.5.0","lessThan":"3.5.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-22T14:30:40.495897Z","id":"CVE-2025-4575","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"91ADE80D-F0FB-4EC0-AAB1-2AA34E2FC63D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/e96d22446e633d117e6c9904cb15b4693e956eaa","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20250522.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2025/05/22/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-48057","sourceIdentifier":"security-advisories@github.com","published":"2025-05-27T17:15:26.387","lastModified":"2026-06-17T09:29:04.740","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate() function can be tricked into incorrectly treating certificates as valid. This allows an attacker to send a malicious certificate request that is then treated as a renewal of an already existing certificate, resulting in the attacker obtaining a valid certificate that can be used to impersonate trusted nodes. This only occurs when Icinga 2 is built with OpenSSL older than version 1.1.0. This issue has been patched in versions 2.12.12, 2.13.12, and 2.14.6."},{"lang":"es","value":"Icinga 2 es un sistema de monitorización que comprueba la disponibilidad de los recursos de red, notifica a los usuarios sobre interrupciones y genera datos de rendimiento para la generación de informes. En versiones anteriores a las 2.12.12, 2.13.12 y 2.14.6, la función VerifyCertificate() podía ser manipulada para que tratara incorrectamente los certificados como válidos. Esto permite a un atacante enviar una solicitud de certificado maliciosa que se trata como una renovación de un certificado ya existente, lo que permite al atacante obtener un certificado válido que puede usar para suplantar nodos de confianza. Esto solo ocurre cuando Icinga 2 se compila con OpenSSL anterior a la versión 1.1.0. Este problema se ha corregido en las versiones 2.12.12, 2.13.12 y 2.14.6."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"Icinga","product":"icinga2","versions":[{"version":">= 2.14.0, < 2.14.6","status":"affected"},{"version":">= 2.13.0, < 2.13.12","status":"affected"},{"version":"< 2.12.12","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-27T18:20:40.298192Z","id":"CVE-2025-48057","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-296"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:*","versionEndExcluding":"2.12.12","matchCriteriaId":"74DD9A1E-ED29-4583-ACAF-107C6BF0C189"},{"vulnerable":true,"criteria":"cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:*","versionStartIncluding":"2.13.0","versionEndExcluding":"2.13.12","matchCriteriaId":"E890262E-EE07-45CA-9887-35C3717460E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:icinga:icinga:*:*:*:*:*:*:*:*","versionStartIncluding":"2.14.0","versionEndExcluding":"2.14.6","matchCriteriaId":"A9A3F53C-0133-4758-B3D5-ABE22D5762D0"}]}]}],"references":[{"url":"https://github.com/Icinga/icinga2/commit/34c93a2542bbe4e9886d15bc17ec929ead1aa152","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/Icinga/icinga2/commit/4023128be42b18a011dda71ddee9ca79955b89cb","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/Icinga/icinga2/commit/60f75f4a3d5cbb234eb3694ba7e9076a1a5b8776","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/Icinga/icinga2/commit/9ad5683aab9eb392c6737ff46c830a945c9e240f","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/Icinga/icinga2/commit/9b2c05d0cc09210bdeade77cf9a73859250fc48d","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/Icinga/icinga2/security/advisories/GHSA-7vcf-f5v9-3wr6","source":"security-advisories@github.com","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-5480","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-06-06T19:15:27.757","lastModified":"2026-06-17T09:48:00.183","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Action1.  An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-26767."},{"lang":"es","value":"Vulnerabilidad de escalada de privilegios locales en el elemento de ruta de búsqueda no controlada de Action1. Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Action1. Para explotar esta vulnerabilidad, un atacante debe primero ejecutar código con pocos privilegios en el sistema objetivo. La falla específica se encuentra en la configuración de OpenSSL. El producto carga un archivo de configuración de OpenSSL desde una ubicación no segura. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto de SYSTEM. Anteriormente, se denominaba ZDI-CAN-26767."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Action1","product":"Action1","defaultStatus":"unknown","versions":[{"version":"5.216.617.1","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-09T16:47:40.849558Z","id":"CVE-2025-5480","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:action1:agent:*:*:*:*:*:*:*:*","versionEndExcluding":"5.218.620.1","matchCriteriaId":"2091AAD6-32BD-4957-8B06-9EE0C5A5CCDD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"https://www.action1.com/blog/acknowledging-zdi-can-26767-high-severity-vulnerability-in-action1-agent/","source":"zdi-disclosures@trendmicro.com","tags":["Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-323/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-27587","sourceIdentifier":"cve@mitre.org","published":"2025-06-16T22:15:44.093","lastModified":"2026-06-17T09:03:50.853","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using the private key to extract the K value (nonce) from the signatures. Next, based on the bit size of the extracted nonce, one can compare the signing time of full-sized nonces to signatures that used smaller nonces, via statistical tests. There is a side-channel in the P-364 curve that allows private key extraction (also, there is a dependency between the bit size of K and the size of the side channel). NOTE: This CVE is disputed because the OpenSSL security policy explicitly notes that any side channels which require same physical system to be detected are outside of the threat model for the software. The timing signal is so small that it is infeasible to be detected without having the attacking process running on the same physical system."},{"lang":"es","value":"OpenSSL 3.0.0 a 3.3.2 en la arquitectura PowerPC es vulnerable a un ataque Minerva. Este ataque se puede explotar midiendo el tiempo de firma de mensajes aleatorios mediante la API EVP_DigestSign y, posteriormente, utilizando la clave privada para extraer el valor K (nonce) de las firmas. A continuación, basándose en el tamaño en bits del nonce extraído, se puede comparar el tiempo de firma de nonces de tamaño completo con el de firmas que utilizan nonces más pequeños mediante pruebas estadísticas. Existe un canal lateral en la curva P-364 que permite la extracción de la clave privada (además, existe una dependencia entre el tamaño en bits de K y el tamaño del canal lateral). NOTA: Esta CVE es controvertida porque la política de seguridad de OpenSSL indica explícitamente que cualquier canal lateral que requiera la detección del mismo sistema físico queda fuera del modelo de amenazas del software. La señal de tiempo es tan pequeña que es imposible detectarla sin que el proceso atacante se ejecute en el mismo sistema físico."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-26T16:16:27.533510Z","id":"CVE-2025-27587","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-385"}]}],"references":[{"url":"https://github.com/openssl/openssl/issues/24253","source":"cve@mitre.org"},{"url":"https://minerva.crocs.fi.muni.cz","source":"cve@mitre.org"}]}},{"cve":{"id":"CVE-2025-5372","sourceIdentifier":"secalert@redhat.com","published":"2025-07-04T06:15:24.930","lastModified":"2026-09-01T12:17:26.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success—the function may mistakenly return a success status even when key derivation fails. This results in uninitialized cryptographic key buffers being used in subsequent communication, potentially compromising SSH sessions' confidentiality, integrity, and availability."},{"lang":"es","value":"Se encontró una falla en las versiones de libssh compiladas con versiones de OpenSSL anteriores a la 3.0, específicamente en la función ssh_kdf(), responsable de la derivación de claves. Debido a la interpretación inconsistente de los valores de retorno, donde OpenSSL usa 0 para indicar un fallo y libssh usa 0 para éxito, la función puede devolver erróneamente un estado de éxito incluso cuando la derivación de claves falla. Esto provoca que se utilicen búferes de claves criptográficas sin inicializar en comunicaciones posteriores, lo que podría comprometer la confidencialidad, integridad y disponibilidad de las sesiones SSH."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"libssh","product":"libssh","defaultStatus":"unaffected","collectionURL":"https://git.libssh.org/projects/libssh.git","packageName":"libssh","versions":[{"version":"0","lessThan":"0.11.2","versionType":"semver","status":"affected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"versions":[{"version":"0:0.9.6-16.el8_10","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"versions":[{"version":"0:0.9.6-16.el8_10","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"versions":[{"version":"0:0.9.4-2.el8_4.2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:rhel_aus:8.4::appstream","cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/o:redhat:rhel_aus:8.4::baseos","cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"],"versions":[{"version":"0:0.9.4-2.el8_4.2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"versions":[{"version":"0:0.9.6-4.el8_6.2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:rhel_aus:8.6::appstream","cpe:/a:redhat:rhel_eus_long_life:8.6::appstream","cpe:/o:redhat:rhel_aus:8.6::baseos","cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"],"versions":[{"version":"0:0.9.6-4.el8_6.2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"versions":[{"version":"0:0.9.6-13.el8_8.2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream","cpe:/o:redhat:rhel_e4s:8.8::baseos","cpe:/o:redhat:rhel_tus:8.8::baseos"],"versions":[{"version":"0:0.9.6-13.el8_8.2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:rhel_e4s:9.0::appstream","cpe:/o:redhat:rhel_e4s:9.0::baseos"],"versions":[{"version":"0:0.9.6-3.el9_0.2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh2","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh2","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-8","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","cpes":["cpe:/a:redhat:openshift:4"]}]}],"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.6,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-08T14:08:57.301926Z","id":"CVE-2025-5372","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-682"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*","versionEndExcluding":"0.11.2","matchCriteriaId":"6E05F605-6E29-4F09-96DF-A1E1B29D0C3C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*","matchCriteriaId":"932D137F-528B-4526-9A89-CD59FA1AB0FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"142AD0DD-4CF3-4D74-9442-459CE3347E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"F4CFF558-3C47-480D-A2F0-BABF26042943"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"7F6FB57C-2BC7-487C-96DD-132683AEB35D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C"}]}]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2025:21977","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:23024","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:20610","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:24349","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:25911","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2025-5372","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2369388","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-5987","sourceIdentifier":"secalert@redhat.com","published":"2025-07-07T15:15:28.180","lastModified":"2026-10-16T11:16:59.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with the SSH_OK code, resulting in libssh not properly detecting the error returned by the OpenSSL library. This issue can lead to undefined behavior, including compromised data confidentiality and integrity or crashes."},{"lang":"es","value":"Se detectó una falla en libssh al usar el cifrado ChaCha20 con la librería OpenSSL. Si un atacante logra agotar el espacio del montón, este error no se detecta y puede provocar que libssh use un contexto de cifrado parcialmente inicializado. Esto se debe a que el código de error de OpenSSL devolvió alias con el código SSH_OK, lo que impide que libssh detecte correctamente el error devuelto por la librería OpenSSL. Este problema puede provocar un comportamiento indefinido, como la confidencialidad e integridad de los datos comprometidas o fallos."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"defaultStatus":"unaffected","collectionURL":"https://www.libssh.org/","packageName":"libssh","versions":[{"version":"0.10.0","lessThan":"0.11.2","versionType":"semver","status":"affected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"versions":[{"version":"0:0.11.1-5.el10_1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"versions":[{"version":"0:0.11.1-4.el10_0.1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"versions":[{"version":"0:0.10.4-17.el9_7","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"versions":[{"version":"0:0.10.4-17.el9_7","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"versions":[{"version":"0:0.10.4-9.el9_2.2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:rhel_eus:9.4::appstream","cpe:/o:redhat:rhel_eus:9.4::baseos"],"versions":[{"version":"0:0.10.4-13.el9_4.2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"versions":[{"version":"0:0.10.4-15.el9_6.1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","cpes":["cpe:/a:redhat:openshift:4.13::el9"],"versions":[{"version":"413.92.202602240113-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","cpes":["cpe:/a:redhat:openshift:4.14::el9"],"versions":[{"version":"414.92.202601191325-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","cpes":["cpe:/a:redhat:openshift:4.15::el9"],"versions":[{"version":"415.92.202601271320-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","cpes":["cpe:/a:redhat:openshift:4.16::el9"],"versions":[{"version":"416.94.202601160124-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","cpes":["cpe:/a:redhat:openshift:4.17::el9"],"versions":[{"version":"417.94.202601120213-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","cpes":["cpe:/a:redhat:openshift:4.18::el9"],"versions":[{"version":"418.94.202601202224-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","cpes":["cpe:/a:redhat:openshift:4.19::el9"],"versions":[{"version":"4.19.9.6.202601260820-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.20","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","cpes":["cpe:/a:redhat:openshift:4.20::el9"],"versions":[{"version":"4.20.9.6.202601211057-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh2","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh2","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-8","cpes":["cpe:/a:redhat:openshift:4"]}]}],"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-22T04:55:55.619672Z","id":"CVE-2025-5987","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-393"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*","versionStartIncluding":"0.10.0","versionEndExcluding":"0.11.2","matchCriteriaId":"28859F90-CC03-4355-AC1B-E595AE86511A"}]}]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2025:23483","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:23484","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:0427","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:0428","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:0430","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:0431","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:0702","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:0978","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:0980","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:0985","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:0996","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:1539","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:1541","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:3415","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2025-5987","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2376219","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://www.libssh.org/security/advisories/CVE-2025-5987.txt","source":"secalert@redhat.com"}]}},{"cve":{"id":"CVE-2025-4662","sourceIdentifier":"sirt@brocade.com","published":"2025-07-10T21:15:28.910","lastModified":"2026-06-17T09:33:44.270","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command line or while providing the passphrase through a temporary file.\n\nThese audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user."},{"lang":"es","value":"Brocade SANnav, versiones anteriores a SANnav 2.4.0a, registra contraseñas de texto sin formato en los registros de auditoría del servidor host de Brocade SANnav al ejecutar un comando OpenSSL mediante una contraseña desde la línea de comandos o al proporcionarla mediante un archivo temporal. Estos registros de auditoría corresponden a la máquina virtual del servidor local y no están controlados por SANnav. Solo son visibles para el administrador del servidor host y no para el administrador ni ningún usuario de SANnav."}],"affected":[{"source":"sirt@brocade.com","affectedData":[{"vendor":"Broadcom","product":"Brocade SANnav","defaultStatus":"unaffected","versions":[{"version":"before SANnav 2.4.0a","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"sirt@brocade.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"PASSIVE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","baseScore":4.4,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-11T16:59:30.808679Z","id":"CVE-2025-4662","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"sirt@brocade.com","type":"Secondary","description":[{"lang":"en","value":"CWE-497"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:brocade_sannav:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.0a","matchCriteriaId":"E2453247-DD62-4231-993A-C6BA3027B1CB"}]}]}],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35908","source":"sirt@brocade.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-7394","sourceIdentifier":"facts@wolfssl.com","published":"2025-07-18T23:15:23.470","lastModified":"2026-06-17T10:04:50.223","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"In the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as expected and leading to the potential for predictable values returned from RAND_bytes() after fork() is called. This can lead to weak or predictable random numbers generated in applications that are both using RAND_bytes() and doing fork() operations. This only affects applications explicitly calling RAND_bytes() after fork() and does not affect any internal TLS operations. Although RAND_bytes() documentation in OpenSSL calls out not being safe for use with fork() without first calling RAND_poll(), an additional code change was also made in wolfSSL to make RAND_bytes() behave similar to OpenSSL after a fork() call without calling RAND_poll(). Now the Hash-DRBG used gets reseeded after detecting running in a new process. If making use of RAND_bytes() and calling fork() we recommend updating to the latest version of wolfSSL. Thanks to Per Allansson from Appgate for the report."},{"lang":"es","value":"En la implementación de la capa de compatibilidad de OpenSSL, la función RAND_poll() no se comportaba como se esperaba, lo que podía generar valores predecibles de RAND_bytes() tras llamar a fork(). Esto puede generar números aleatorios débiles o predecibles en aplicaciones que usan RAND_bytes() y realizan operaciones fork(). Esto solo afecta a las aplicaciones que llaman explícitamente a RAND_bytes() después de fork() y no afecta a las operaciones internas de TLS. Aunque la documentación de RAND_bytes() en OpenSSL indica que no es seguro usarla con fork() sin llamar primero a RAND_poll(), también se realizó un cambio de código adicional en wolfSSL para que RAND_bytes() se comporte de forma similar a OpenSSL tras una llamada a fork() sin llamar a RAND_poll(). Ahora, el Hash-DRBG utilizado se resembraliza tras detectar la ejecución en un nuevo proceso. Si se utiliza RAND_bytes() y se llama a fork(), se recomienda actualizar a la última versión de wolfSSL. Gracias a Per Allansson de Appgate por el informe."}],"affected":[{"source":"facts@wolfssl.com","affectedData":[{"vendor":"wolfSSL","product":"wolfSSL","defaultStatus":"unaffected","repo":"https://github.com/wolfssl/wolfssl","versions":[{"version":"3.15.0","lessThanOrEqual":"5.8.0","versionType":"git","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"facts@wolfssl.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"PASSIVE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-21T15:00:11.053980Z","id":"CVE-2025-7394","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"facts@wolfssl.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-338"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.15.0","versionEndIncluding":"5.8.0","matchCriteriaId":"18A12E06-A9AD-488D-B3A6-8F6DBE0DA749"}]}]}],"references":[{"url":"https://github.com/wolfSSL/wolfssl/blob/master/ChangeLog.md#wolfssl-release-582-july-17-2025","source":"facts@wolfssl.com","tags":["Release Notes"]}]}},{"cve":{"id":"CVE-2025-0664","sourceIdentifier":"trellixpsirt@trellix.com","published":"2025-07-21T07:15:23.273","lastModified":"2026-06-17T08:26:55.550","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library. This may impair endpoint defenses and allow the attacker to achieve code execution with SYSTEM-level privileges."},{"lang":"es","value":"Un usuario privilegiado y autenticado localmente puede manipular un archivo de configuración de OpenSSL malicioso, lo que podría provocar que el agente cargue una librería local arbitraria. Esto puede debilitar las defensas del endpoint y permitir que el atacante ejecute código con privilegios de nivel SYSTEM."}],"affected":[{"source":"trellixpsirt@trellix.com","affectedData":[{"vendor":"Trellix","product":"Trellix Endpoint Security (HX) Agent","defaultStatus":"unaffected","versions":[{"version":"36.30.0 and 35.31.28","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"trellixpsirt@trellix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:L/U:Green","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NEGLIGIBLE","Automatable":"YES","Recovery":"USER","valueDensity":"DIFFUSE","vulnerabilityResponseEffort":"LOW","providerUrgency":"GREEN"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-21T15:18:02.358936Z","id":"CVE-2025-0664","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"trellixpsirt@trellix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"references":[{"url":"https://thrive.trellix.com/s/article/000014450","source":"trellixpsirt@trellix.com"}]}},{"cve":{"id":"CVE-2025-8069","sourceIdentifier":"ff89ba41-3aa1-4d27-914a-91399e9639e5","published":"2025-07-23T16:15:29.243","lastModified":"2026-06-17T10:06:15.150","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"During the AWS Client VPN client installation on Windows devices, the install process references the C:\\usr\\local\\windows-x86_64-openssl-localbuild\\ssl directory location to fetch the OpenSSL configuration file. As a result, a non-admin user could place arbitrary code in the configuration file. If an admin user starts the AWS Client VPN client installation process, that code could be executed with root-level privileges. This issue does not affect Linux or Mac devices. \n\nWe recommend users discontinue any new installations of AWS Client VPN on Windows prior to version 5.2.2."},{"lang":"es","value":"Durante la instalación del cliente AWS Client VPN en dispositivos Windows, el proceso de instalación utiliza el directorio C:\\usr\\local\\windows-x86_64-openssl-localbuild\\ssl para obtener el archivo de configuración de OpenSSL. Por lo tanto, un usuario no administrador podría insertar código arbitrario en el archivo de configuración. Si un usuario administrador inicia la instalación del cliente AWS Client VPN, dicho código podría ejecutarse con privilegios de root. Este problema no afecta a dispositivos Linux ni Mac. Recomendamos a los usuarios que interrumpan cualquier instalación nueva de AWS Client VPN en Windows anterior a la versión 5.2.2."}],"affected":[{"source":"ff89ba41-3aa1-4d27-914a-91399e9639e5","affectedData":[{"vendor":"AWS","product":"Client VPN","defaultStatus":"unaffected","platforms":["Windows"],"versions":[{"version":"4.1.0","versionType":"semver","status":"affected"},{"version":"5.0.0","lessThan":"5.2.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"ff89ba41-3aa1-4d27-914a-91399e9639e5","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"ff89ba41-3aa1-4d27-914a-91399e9639e5","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-23T16:21:42.324291Z","id":"CVE-2025-8069","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"ff89ba41-3aa1-4d27-914a-91399e9639e5","type":"Secondary","description":[{"lang":"en","value":"CWE-276"}]}],"references":[{"url":"https://aws.amazon.com/security/security-bulletins/AWS-2025-014/","source":"ff89ba41-3aa1-4d27-914a-91399e9639e5"},{"url":"https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-windows-release-notes.html","source":"ff89ba41-3aa1-4d27-914a-91399e9639e5"}]}},{"cve":{"id":"CVE-2023-53159","sourceIdentifier":"cve@mitre.org","published":"2025-07-28T03:15:23.193","lastModified":"2026-09-17T16:42:20.210","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host."},{"lang":"es","value":"El paquete openssl para Rust anterior a 0.10.55 permite una lectura fuera de los límites a través de una cadena vacía a X509VerifyParamRef::set_host."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"sfackler","product":"openssl","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"0.10.55","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L","baseScore":4.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":1.4,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-28T13:54:18.222785Z","id":"CVE-2023-53159","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@mitre.org","type":"Secondary","description":[{"lang":"en","value":"CWE-126"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sfackler:openssl:*:*:*:*:*:rust:*:*","versionEndExcluding":"0.10.55","matchCriteriaId":"57EF18B7-20B6-4EA8-BE0D-732910E67318"}]}]}],"references":[{"url":"https://crates.io/crates/openssl","source":"cve@mitre.org","tags":["Product"]},{"url":"https://github.com/sfackler/rust-openssl/issues/1965","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2023-0044.html","source":"cve@mitre.org","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-45765","sourceIdentifier":"cve@mitre.org","published":"2025-08-07T21:15:27.570","lastModified":"2026-06-17T09:25:40.503","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is \"keysize is not something that is enforced by this library. Currently more recent versions of OpenSSL are enforcing some key sizes and those restrictions apply to the users of this gem also.\""},{"lang":"es","value":"Se descubrió que ruby-jwt v3.0.0.beta1 contenía un cifrado débil. NOTA: El proveedor considera que el tamaño de clave no es algo que esta librería imponga. Actualmente, las versiones más recientes de OpenSSL imponen ciertos tamaños de clave, y estas restricciones también se aplican a los usuarios de esta gema."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-08-12T14:09:41.057142Z","id":"CVE-2025-45765","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-326"}]}],"references":[{"url":"https://gist.github.com/ZupeiNie/c621253068ce5b64911629534879e8f9","source":"cve@mitre.org"},{"url":"https://github.com/jwt/ruby-jwt/issues/668","source":"cve@mitre.org"}]}},{"cve":{"id":"CVE-2025-8614","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-09-02T20:15:39.547","lastModified":"2026-10-19T17:10:00.173","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine.  An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-26766."},{"lang":"es","value":"Vulnerabilidad de Escalada de Privilegios Local por Elemento de Ruta de Búsqueda No Controlado en NoMachine. Esta vulnerabilidad permite a atacantes locales escalar privilegios en instalaciones afectadas de NoMachine. Un atacante debe primero obtener la capacidad de ejecutar código con pocos privilegios en el sistema objetivo para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la configuración de OpenSSL. El producto carga un archivo de configuración de OpenSSL desde una ubicación no segura. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto de la cuenta de servicio. Fue ZDI-CAN-26766."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"NoMachine","product":"NoMachine","defaultStatus":"unknown","versions":[{"version":"Nomachine agent 8.16.1","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-02T20:35:00.766529Z","id":"CVE-2025-8614","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nomachine:nomachine:*:*:*:*:*:*:*:*","versionEndExcluding":"8.17.2","matchCriteriaId":"599FC181-2755-4375-A584-D7D804393C77"},{"vulnerable":true,"criteria":"cpe:2.3:a:nomachine:nomachine:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndExcluding":"9.1.24","matchCriteriaId":"DA112E87-56D1-4B8A-9D5F-B8CA2B6DED66"}]}]}],"references":[{"url":"https://kb.nomachine.com/TR04W11314","source":"zdi-disclosures@trendmicro.com","tags":["Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-835/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-42927","sourceIdentifier":"cna@sap.com","published":"2025-09-09T02:15:41.243","lastModified":"2026-06-17T09:23:15.140","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SAP NetWeaver AS Java application uses Adobe Document Service, installed with a vulnerable version of OpenSSL.Successful exploitation of known vulnerabilities in the outdated OpenSSL library would allow user with high system privileges to access and modify system information.This vulnerability has a low impact on confidentiality and integrity, with no impact on availability."}],"affected":[{"source":"cna@sap.com","affectedData":[{"vendor":"SAP_SE","product":"SAP NetWeaver AS Java (Adobe Document Service)","defaultStatus":"unaffected","versions":[{"version":"ADSSAP 7.50","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cna@sap.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","baseScore":3.4,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-09T14:18:44.558733Z","id":"CVE-2025-42927","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"references":[{"url":"https://me.sap.com/notes/3525295","source":"cna@sap.com"},{"url":"https://url.sap/sapsecuritypatchday","source":"cna@sap.com"}]}},{"cve":{"id":"CVE-2025-10225","sourceIdentifier":"15ede60e-6fda-426e-be9c-e788f151a377","published":"2025-09-10T13:15:36.430","lastModified":"2026-09-26T00:10:00.127","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One (C-Werk) 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes or unpredictable behavior via triggering memory reallocation errors when handling expired session keys."},{"lang":"es","value":"Restricción inadecuada de operaciones dentro de los límites de un búfer de memoria (CWE-119) en el módulo de sesión basado en OpenSSL en AxxonSoft Axxon One (C-Werk) 2.0.6 y versiones anteriores en Windows permite a un atacante remoto bajo condiciones de alta carga causar bloqueos de la aplicación o comportamiento impredecible mediante la activación de errores de reasignación de memoria al manejar claves de sesión caducadas."}],"affected":[{"source":"15ede60e-6fda-426e-be9c-e788f151a377","affectedData":[{"vendor":"AxxonSoft","product":"AxxonOne C-Werk","defaultStatus":"unaffected","platforms":["Windows"],"versions":[{"version":"0","lessThanOrEqual":"2.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"15ede60e-6fda-426e-be9c-e788f151a377","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"15ede60e-6fda-426e-be9c-e788f151a377","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-10T13:12:14.188891Z","id":"CVE-2025-10225","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"15ede60e-6fda-426e-be9c-e788f151a377","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:axxonsoft:axxon_one:*:*:*:*:*:windows:*:*","versionEndIncluding":"2.0.6","matchCriteriaId":"B70E4B86-9DDF-4045-9C24-85FECD2B3C71"}]}]}],"references":[{"url":"https://www.axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-policy/security-advisories","source":"15ede60e-6fda-426e-be9c-e788f151a377","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-34192","sourceIdentifier":"disclosure@vulncheck.com","published":"2025-09-19T19:15:39.663","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.893 and Application versions prior to 20.0.2140 (macOS/Linux client deployments) are built against OpenSSL 1.0.2h-fips (released May 2016), which has been end-of-life since 2019 and is no longer supported by the OpenSSL project. Continued use of this outdated cryptographic library exposes deployments to known vulnerabilities that are no longer patched, weakening the overall security posture. Affected daemons may emit deprecation warnings and rely on cryptographic components with unresolved security flaws, potentially enabling attackers to exploit weaknesses in TLS/SSL processing or cryptographic operations. This vulnerability has been identified by the vendor as: V-2023-021 — Out-of-Date OpenSSL Library."},{"lang":"es","value":"Vasion Print (anteriormente PrinterLogic) versiones de host de dispositivo virtual anteriores a 22.0.893 y versiones de aplicación anteriores a 20.0.2140 (implementaciones de cliente macOS/Linux) están construidas contra OpenSSL 1.0.2h-fips (lanzada en mayo de 2016), que ha llegado al fin de su vida útil desde 2019 y ya no es compatible con el proyecto OpenSSL. El uso continuado de esta biblioteca criptográfica obsoleta expone las implementaciones a vulnerabilidades conocidas que ya no se parchean, debilitando la postura de seguridad general. Los demonios afectados pueden emitir advertencias de obsolescencia y depender de componentes criptográficos con fallas de seguridad sin resolver, lo que podría permitir a los atacantes explotar debilidades en el procesamiento TLS/SSL o en las operaciones criptográficas. Esta vulnerabilidad ha sido identificada por el proveedor como: V-2023-021 - Biblioteca OpenSSL Obsoleta."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"Vasion","product":"Print Virtual Appliance Host","defaultStatus":"unaffected","modules":["PrinterInstallerClient OpenSSL dependency"],"platforms":["MacOS","Linux"],"versions":[{"version":"0","lessThan":"22.0.893","versionType":"semver","status":"affected"}]},{"vendor":"Vasion","product":"Print Application","defaultStatus":"unknown","modules":["PrinterInstallerClient OpenSSL dependency"],"platforms":["MacOS","Linux"],"versions":[{"version":"0","lessThan":"20.0.2140","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-19T20:02:09.169453Z","id":"CVE-2025-34192","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-1104"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vasion:virtual_appliance_application:*:*:*:*:*:*:*:*","versionEndExcluding":"20.0.2140","matchCriteriaId":"8FC9ACA5-4F78-4BB3-BE31-9F61115B6243"},{"vulnerable":true,"criteria":"cpe:2.3:a:vasion:virtual_appliance_host:*:*:*:*:*:*:*:*","versionEndExcluding":"22.0.893","matchCriteriaId":"22B2EC36-CC37-4128-97F1-5BC1018B35AD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*","matchCriteriaId":"387021A0-AF36-463C-A605-32EA7DAC172E"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]}],"references":[{"url":"https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#mac-outdated-openssl","source":"disclosure@vulncheck.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.vulncheck.com/advisories/vasion-print-printerlogic-usage-of-outdated-and-unsupported-openssl-version","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-34203","sourceIdentifier":"disclosure@vulncheck.com","published":"2025-09-19T19:15:41.187","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.1002 and Application versions prior to 20.0.2614 (VA and SaaS deployments) contain multiple Docker containers that include outdated, end-of-life, unsupported, or otherwise vulnerable third-party components (examples: Nginx 1.17.x, OpenSSL 1.1.1d, various EOL Alpine/Debian/Ubuntu base images, and EOL Laravel/PHP libraries). These components are present across many container images and increase the product's attack surface, enabling exploitation chains when leveraged by an attacker. Multiple distinct EOL versions and unpatched libraries across containers; Nginx binaries date from 2019 in several images and Laravel versions observed include EOL releases (for example Laravel 5.5.x, 5.7.x, 5.8.x). This vulnerability has been identified by the vendor as: V-2024-014 — Outdated Dependencies."},{"lang":"es","value":"Las versiones de Vasion Print (anteriormente PrinterLogic) Virtual Appliance Host anteriores a la 22.0.1002 y las versiones de la aplicación anteriores a la 20.0.2614 (implementaciones VA y SaaS) contienen múltiples contenedores Docker que incluyen componentes de terceros obsoletos, con fin de vida útil, sin soporte o de otro modo vulnerables (ejemplos: Nginx 1.17.x, OpenSSL 1.1.1d, varias imágenes base EOL de Alpine/Debian/Ubuntu, y librerías EOL de Laravel/PHP). Estos componentes están presentes en muchas imágenes de contenedor y aumentan la superficie de ataque del producto, lo que permite cadenas de explotación cuando son aprovechadas por un atacante. Múltiples versiones EOL distintas y librerías sin parchear en los contenedores; los binarios de Nginx datan de 2019 en varias imágenes y las versiones de Laravel observadas incluyen lanzamientos EOL (por ejemplo, Laravel 5.5.x, 5.7.x, 5.8.x). Esta vulnerabilidad ha sido identificada por el proveedor como: V-2024-014 - Dependencias Obsoletas."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"Vasion","product":"Print Virtual Appliance Host","defaultStatus":"unknown","modules":["Docker container base images","bundled Nginx","OpenSSL","PHP libraries","Laravel framework"],"versions":[{"version":"0","lessThan":"22.0.1002","versionType":"semver","status":"affected"}]},{"vendor":"Vasion","product":"Print Application","defaultStatus":"unknown","modules":["Docker container base images","bundled Nginx","OpenSSL","PHP libraries","Laravel framework"],"versions":[{"version":"0","lessThan":"20.0.2614","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-19T19:04:54.798970Z","id":"CVE-2025-34203","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vasion:virtual_appliance_application:*:*:*:*:*:*:*:*","versionEndExcluding":"20.0.2614","matchCriteriaId":"C6EE2B20-48F8-4FE7-91E0-52422CE8973C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vasion:virtual_appliance_host:*:*:*:*:*:*:*:*","versionEndExcluding":"22.0.1002","matchCriteriaId":"AFCD8913-3F99-4CF3-B18D-D95750B555DF"}]}]}],"references":[{"url":"https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://help.printerlogic.com/va/Print/Security/Security-Bulletins.htm","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html#va-outdated-components","source":"disclosure@vulncheck.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.vulncheck.com/advisories/vasion-print-printerlogic-use-of-outdated-eol-vulnerable-third-party-components","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-60018","sourceIdentifier":"secalert@redhat.com","published":"2025-09-25T16:15:36.167","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"glib-networking's OpenSSL backend fails to properly check the return value of a call to BIO_write(), resulting in an out of bounds read."},{"lang":"es","value":"El backend de OpenSSL de glib-networking no verifica correctamente el valor de retorno de una llamada a BIO_write(), lo que resulta en una lectura fuera de límites."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"defaultStatus":"unaffected","collectionURL":"https://gitlab.gnome.org/GNOME/glib-networking","packageName":"glib-networking","versions":[{"version":"2.60","lessThan":"2.80.2","versionType":"semver","status":"affected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"glib-networking","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"glib-networking","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"glib-networking","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"glib-networking","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"glib-networking","cpes":["cpe:/o:redhat:enterprise_linux:9"]}]}],"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-25T16:36:54.893473Z","id":"CVE-2025-60018","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-60018","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2398135","source":"secalert@redhat.com"},{"url":"https://gitlab.gnome.org/GNOME/glib-networking/-/issues/226","source":"secalert@redhat.com"}]}},{"cve":{"id":"CVE-2025-60019","sourceIdentifier":"secalert@redhat.com","published":"2025-09-25T16:15:36.357","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines. An out of memory condition could potentially result in writing to an invalid memory location."},{"lang":"es","value":"El backend de OpenSSL de glib-networking no verifica correctamente el valor de retorno de las rutinas de asignación de memoria. Una condición de falta de memoria podría potencialmente resultar en la escritura en una ubicación de memoria no válida."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"defaultStatus":"unaffected","collectionURL":"https://gitlab.gnome.org/GNOME/glib-networking","packageName":"glib-networking","versions":[{"version":"2.60","lessThan":"2.80.2","versionType":"semver","status":"affected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"glib-networking","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"glib-networking","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"glib-networking","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"glib-networking","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"glib-networking","cpes":["cpe:/o:redhat:enterprise_linux:9"]}]}],"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-25T16:30:38.189227Z","id":"CVE-2025-60019","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-60019","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2398140","source":"secalert@redhat.com"},{"url":"https://gitlab.gnome.org/GNOME/glib-networking/-/issues/227","source":"secalert@redhat.com"}]}},{"cve":{"id":"CVE-2025-9230","sourceIdentifier":"openssl-security@openssl.org","published":"2025-09-30T14:15:41.050","lastModified":"2026-10-15T02:18:27.243","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary."},{"lang":"es","value":"Resumen del problema: Una aplicación que intenta descifrar mensajes CMS cifrados usando cifrado basado en contraseña puede desencadenar una lectura y escritura fuera de límites.\n\nResumen del impacto: Esta lectura fuera de límites puede desencadenar un fallo que lleva a una Denegación de Servicio para una aplicación. La escritura fuera de límites puede causar una corrupción de memoria que puede tener varias consecuencias, incluyendo una Denegación de Servicio o la ejecución de código suministrado por el atacante.\n\nAunque las consecuencias de un exploit exitoso de esta vulnerabilidad podrían ser graves, la probabilidad de que el atacante pudiera realizarlo es baja. Además, el soporte de cifrado basado en contraseña (PWRI) en mensajes CMS se usa muy raramente. Por esa razón, el problema fue evaluado como de severidad Moderada según nuestra Política de Seguridad.\n\nLos módulos FIPS en 3.5, 3.4, 3.3, 3.2, 3.1 y 3.0 no se ven afectados por este problema, ya que la implementación de CMS está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.5.0","lessThan":"3.5.4","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.3","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.5","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThan":"3.2.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.18","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1zd","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zm","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XCH328","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XCM324","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XCM328","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XCM332","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRH334 (24 V DC, 8xFO, CC)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (230 V AC, 12xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (230 V AC, 8xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (24 V DC, 12xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (24 V DC, 8xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230 V AC, 12xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230 V AC, 8xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIDIS Prime","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0.800","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIDIS Secured SmartPlug","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.26.0310","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CN 4100","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.1.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-30T19:30:08.302408Z","id":"CVE-2025-9230","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-125"},{"lang":"en","value":"CWE-787"}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482","source":"openssl-security@openssl.org"},{"url":"https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3","source":"openssl-security@openssl.org"},{"url":"https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba","source":"openssl-security@openssl.org"},{"url":"https://openssl-library.org/news/secadv/20250930.txt","source":"openssl-security@openssl.org"},{"url":"http://www.openwall.com/lists/oss-security/2025/09/30/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-089022.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-485750.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-585531.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-9231","sourceIdentifier":"openssl-security@openssl.org","published":"2025-09-30T14:15:41.190","lastModified":"2026-07-14T13:18:07.550","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A timing side-channel which could potentially allow remote\nrecovery of the private key exists in the SM2 algorithm implementation on 64 bit\nARM platforms.\n\nImpact summary: A timing side-channel in SM2 signature computations on 64 bit\nARM platforms could allow recovering the private key by an attacker..\n\nWhile remote key recovery over a network was not attempted by the reporter,\ntiming measurements revealed a timing signal which may allow such an attack.\n\nOpenSSL does not directly support certificates with SM2 keys in TLS, and so\nthis CVE is not relevant in most TLS contexts.  However, given that it is\npossible to add support for such certificates via a custom provider, coupled\nwith the fact that in such a custom provider context the private key may be\nrecoverable via remote timing measurements, we consider this to be a Moderate\nseverity issue.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as SM2 is not an approved algorithm."},{"lang":"es","value":"Resumen del problema: Existe un canal lateral de temporización que podría permitir potencialmente la recuperación remota de la clave privada en la implementación del algoritmo SM2 en plataformas ARM de 64 bits.\n\nResumen del impacto: Un canal lateral de temporización en los cálculos de firma SM2 en plataformas ARM de 64 bits podría permitir la recuperación de la clave privada por un atacante.\n\nAunque el informante no intentó la recuperación remota de la clave a través de una red, las mediciones de temporización revelaron una señal de temporización que podría permitir tal ataque.\n\nOpenSSL no soporta directamente certificados con claves SM2 en TLS, por lo que este CVE no es relevante en la mayoría de los contextos TLS. Sin embargo, dado que es posible añadir soporte para dichos certificados a través de un proveedor personalizado, junto con el hecho de que en un contexto de proveedor personalizado de este tipo la clave privada podría ser recuperable mediante mediciones remotas de temporización, consideramos que este es un problema de severidad Moderada.\n\nLos módulos FIPS en 3.5, 3.4, 3.3, 3.2, 3.1 y 3.0 no se ven afectados por este problema, ya que SM2 no es un algoritmo aprobado."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.5.0","lessThan":"3.5.4","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.3","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.5","versionType":"semver","status":"affected"},{"version":"3.2.0","lessThan":"3.2.6","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XCH328","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XCM324","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XCM328","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XCM332","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRH334 (24 V DC, 8xFO, CC)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (230 V AC, 12xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (230 V AC, 8xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (24 V DC, 12xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (24 V DC, 8xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230 V AC, 12xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230 V AC, 8xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIDIS Secured SmartPlug","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.26.0310","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CN 4100","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-30T19:27:45.704985Z","id":"CVE-2025-9231","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-385"}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/567f64386e43683888212226824b6a179885a0fe","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/cba616c26ac8e7b37de5e77762e505ba5ca51698","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/eed5adc9f969d77c94f213767acbb41ff923b6f4","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/fc47a2ec078912b3e914fab5734535e76c4820c2","source":"openssl-security@openssl.org"},{"url":"https://openssl-library.org/news/secadv/20250930.txt","source":"openssl-security@openssl.org"},{"url":"http://www.openwall.com/lists/oss-security/2025/09/30/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2026/05/11/11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-089022.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-585531.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-9232","sourceIdentifier":"openssl-security@openssl.org","published":"2025-09-30T14:15:41.313","lastModified":"2026-07-14T13:18:07.783","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary."},{"lang":"es","value":"Resumen del problema: Una aplicación que utiliza las funciones API del cliente HTTP de OpenSSL puede desencadenar una lectura fuera de límites si la variable de entorno 'no_proxy' está configurada y la porción de host del componente de autoridad de la URL HTTP es una dirección IPv6.\n\nResumen del impacto: Una lectura fuera de límites puede desencadenar un fallo que lleva a una denegación de servicio para una aplicación.\n\nLas funciones API del cliente HTTP de OpenSSL pueden ser utilizadas directamente por las aplicaciones, pero también son utilizadas por las funciones del cliente OCSP y la implementación del cliente CMP (Protocolo de Gestión de Certificados) en OpenSSL. Sin embargo, es poco probable que las URL utilizadas por estas implementaciones sean controladas por un atacante.\n\nEn este código vulnerable, la lectura fuera de límites solo puede desencadenar un fallo. Además, la vulnerabilidad requiere que una URL controlada por un atacante sea pasada de una aplicación a la función de OpenSSL y que el usuario tenga configurada una variable de entorno 'no_proxy'. Por las razones antes mencionadas, el problema fue evaluado como de baja severidad.\n\nEl código vulnerable fue introducido en las siguientes versiones de parche: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 y 3.5.0.\n\nLos módulos FIPS en 3.5, 3.4, 3.3, 3.2, 3.1 y 3.0 no se ven afectados por este problema, ya que la implementación del cliente HTTP está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.5.0","lessThan":"3.5.4","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.3","versionType":"semver","status":"affected"},{"version":"3.3.3","lessThan":"3.3.5","versionType":"semver","status":"affected"},{"version":"3.2.4","lessThan":"3.2.6","versionType":"semver","status":"affected"},{"version":"3.0.16","lessThan":"3.0.18","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XCH328","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XCM324","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XCM328","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XCM332","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRH334 (24 V DC, 8xFO, CC)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (230 V AC, 12xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (230 V AC, 8xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (24 V DC, 12xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (24 V DC, 8xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230 V AC, 12xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230 V AC, 8xFO)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIDIS Prime","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0.800","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIDIS Secured SmartPlug","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V7.26.0310","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC CN 4100","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.5","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-09-30T19:22:31.407504Z","id":"CVE-2025-9232","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0","source":"openssl-security@openssl.org"},{"url":"https://openssl-library.org/news/secadv/20250930.txt","source":"openssl-security@openssl.org"},{"url":"http://www.openwall.com/lists/oss-security/2025/09/30/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-089022.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-485750.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-585531.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-27237","sourceIdentifier":"security@zabbix.com","published":"2025-10-03T12:15:43.930","lastModified":"2026-10-19T17:10:00.173","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local privilege escalation by injecting a DLL."},{"lang":"es","value":"En Zabbix Agent y Agent 2 en Windows, el archivo de configuración de OpenSSL se carga desde una ruta escribible por usuarios con pocos privilegios, lo que permite una modificación maliciosa y una potencial escalada de privilegios local mediante la inyección de una DLL."}],"affected":[{"source":"security@zabbix.com","affectedData":[{"vendor":"Zabbix","product":"Zabbix","defaultStatus":"unknown","modules":["Agent","Agent2"],"repo":"https://git.zabbix.com/","versions":[{"version":"6.0.0","lessThanOrEqual":"6.0.40","versionType":"git","status":"affected","changes":[{"at":"6.0.41","status":"unaffected"}]},{"version":"7.0.0","lessThanOrEqual":"7.0.17","versionType":"git","status":"affected","changes":[{"at":"7.0.18","status":"unaffected"}]},{"version":"7.2.0","lessThanOrEqual":"7.2.11","versionType":"git","status":"affected","changes":[{"at":"7.2.12","status":"unaffected"}]},{"version":"7.4.0","lessThanOrEqual":"7.4.1","versionType":"git","status":"affected","changes":[{"at":"7.4.2","status":"unaffected"}]}]}]}],"metrics":{"cvssMetricV40":[{"source":"security@zabbix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-04T03:55:25.723856Z","id":"CVE-2025-27237","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@zabbix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"references":[{"url":"https://support.zabbix.com/browse/ZBX-27061","source":"security@zabbix.com"}]}},{"cve":{"id":"CVE-2025-62375","sourceIdentifier":"security-advisories@github.com","published":"2025-10-15T20:15:36.670","lastModified":"2026-10-08T11:10:00.250","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"go-witness and witness are Go modules for generating attestations. In go-witness versions 0.8.6 and earlier and witness versions 0.9.2 and earlier the AWS attestor improperly verifies AWS EC2 instance identity documents. Verification can incorrectly succeed when a signature is not present or is empty, and when RSA signature verification fails. The attestor also embeds a single legacy global AWS public certificate and does not account for newer region specific certificates issued in 2024, making detection of forged documents difficult without additional trusted region data. An attacker able to supply or intercept instance identity document data (such as through Instance Metadata Service impersonation) can cause a forged identity document to be accepted, leading to incorrect trust decisions based on the attestation. This is fixed in go-witness 0.9.1 and witness 0.10.1. As a workaround, manually verify the included identity document, signature, and public key with standard tools (for example openssl) following AWS’s verification guidance, or disable use of the AWS attestor until upgraded."},{"lang":"es","value":"go-witness y witness son módulos Go para generar atestaciones. En las versiones 0.8.6 y anteriores de go-witness y las versiones 0.9.2 y anteriores de witness, el atestador de AWS verifica incorrectamente los documentos de identidad de instancia de AWS EC2. La verificación puede tener éxito incorrectamente cuando una firma no está presente o está vacía, y cuando falla la verificación de la firma RSA. El atestador también incrusta un único certificado público global heredado de AWS y no tiene en cuenta los certificados más recientes específicos de región emitidos en 2024, lo que dificulta la detección de documentos falsificados sin datos de región confiables adicionales. Un atacante capaz de suministrar o interceptar datos de documentos de identidad de instancia (como a través de la suplantación del Servicio de Metadatos de Instancia) puede hacer que se acepte un documento de identidad falsificado, lo que lleva a decisiones de confianza incorrectas basadas en la atestación. Esto se ha corregido en go-witness 0.9.1 y witness 0.10.1. Como solución alternativa, verifique manualmente el documento de identidad, la firma y la clave pública incluidos con herramientas estándar (por ejemplo, OpenSSL) siguiendo la guía de verificación de AWS, o deshabilite el uso del atestador de AWS hasta que se actualice."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"in-toto","product":"go-witness","versions":[{"version":"< 0.9.1","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-15T19:44:18.639906Z","id":"CVE-2025-62375","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"references":[{"url":"https://github.com/in-toto/go-witness/commit/04ff20b600e28ce8fd1aa287534dd383a1cfefb9","source":"security-advisories@github.com"},{"url":"https://github.com/in-toto/go-witness/security/advisories/GHSA-72c7-4g63-hpw5","source":"security-advisories@github.com"}]}},{"cve":{"id":"CVE-2025-41721","sourceIdentifier":"info@cert.vde.com","published":"2025-10-22T07:15:33.477","lastModified":"2026-10-18T21:10:00.120","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate."},{"lang":"es","value":"Un atacante remoto con altos privilegios puede influir en los parámetros pasados al comando OpenSSL debido a una neutralización incorrecta de elementos especiales al añadir un certificado autofirmado protegido con contraseña."}],"affected":[{"source":"info@cert.vde.com","affectedData":[{"vendor":"Sauter","product":"modulo 6 devices modu680-AS","defaultStatus":"unaffected","versions":[{"version":"0.0.0","lessThan":"Firmware v3.2.0","versionType":"semver","status":"affected"}]},{"vendor":"Sauter","product":"modulo 6 devices modu660-AS","defaultStatus":"unaffected","versions":[{"version":"0.0.0","lessThan":"Firmware v3.2.0","versionType":"semver","status":"affected"}]},{"vendor":"Sauter","product":"modulo 6 devices modu612-LC","defaultStatus":"unaffected","versions":[{"version":"0.0.0","lessThan":"Firmware v3.2.0","versionType":"semver","status":"affected"}]},{"vendor":"Sauter","product":"EY-modulo 5 modu 5 modu524","defaultStatus":"unaffected","versions":[{"version":"0.0","lessThan":"Firmware v6.0","versionType":"semver","status":"affected"}]},{"vendor":"Sauter","product":"EY-modulo 5 modu 5 modu525","defaultStatus":"unaffected","versions":[{"version":"0.0","lessThan":"Firmware v6.0","versionType":"semver","status":"affected"}]},{"vendor":"Sauter","product":"EY-modulo 5 ecos 5 ecos504/505","defaultStatus":"unaffected","versions":[{"version":"0.0","lessThan":"Firmware v6.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"info@cert.vde.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-22T13:31:24.266594Z","id":"CVE-2025-41721","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"info@cert.vde.com","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]}],"references":[{"url":"https://sauter.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-060.json","source":"info@cert.vde.com"}]}},{"cve":{"id":"CVE-2025-64429","sourceIdentifier":"security-advisories@github.com","published":"2025-11-12T22:15:49.813","lastModified":"2026-10-19T13:10:00.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator (pcg32) to generate cryptographic keys or IVs. When clearing keys from memory, the compiler may remove the memset() and leave sensitive data on the heap. By modifying the database header, an attacker could downgrade the encryption mode from GCM to CTR to bypass integrity checks. There may be a failure to check return value on call to OpenSSL `rand_bytes()`. An attacker could use public IVs to compromise the internal state of RNG and determine the randomly generated key used to encrypt temporary files, get access to cryptographic keys if they have access to process memory (e.g. through memory leak),circumvent GCM integrity checks, and/or influence the OpenSSL random number generator and DuckDB would not be able to detect a failure of the generator. Version 1.4.2 has disabled the insecure random number generator by no longer using the fallback to write to or create databases. Instead, DuckDB will now attempt to install and load the OpenSSL implementation in the `httpfs` extension. DuckDB now uses secure MbedTLS primitive to clear memory as recommended and requires explicit specification of ciphers without integrity checks like CTR on `ATTACH`. Additionally, DuckDB now checks the return code."},{"lang":"es","value":"DuckDB es un sistema de gestión de bases de datos SQL. DuckDB implementó el cifrado basado en bloques de la base de datos en el sistema de archivos a partir de DuckDB 1.4.0. Existen algunos problemas relacionados con esta implementación. DuckDB puede recurrir a un generador de números aleatorios inseguro (pcg32) para generar claves criptográficas o IVs. Al borrar claves de la memoria, el compilador puede eliminar memset() y dejar datos sensibles en el heap. Al modificar el encabezado de la base de datos, un atacante podría degradar el modo de cifrado de GCM a CTR para eludir las comprobaciones de integridad. Puede haber un fallo al verificar el valor de retorno en la llamada a OpenSSL rand_bytes(). Un atacante podría usar IVs públicos para comprometer el estado interno del RNG y determinar la clave generada aleatoriamente utilizada para cifrar archivos temporales, obtener acceso a claves criptográficas si tiene acceso a la memoria del proceso (por ejemplo, a través de una fuga de memoria), eludir las comprobaciones de integridad de GCM y/o influir en el generador de números aleatorios de OpenSSL y DuckDB no podría detectar un fallo del generador. La versión 1.4.2 ha deshabilitado el generador de números aleatorios inseguro al dejar de usar el recurso alternativo para escribir o crear bases de datos. En su lugar, DuckDB ahora intentará instalar y cargar la implementación de OpenSSL en la extensión httpfs. DuckDB ahora utiliza la primitiva segura MbedTLS para borrar la memoria según lo recomendado y requiere la especificación explícita de cifrados sin comprobaciones de integridad como CTR en ATTACH. Además, DuckDB ahora verifica el código de retorno."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"duckdb","product":"duckdb","versions":[{"version":">= 1.4.0, < 1.4.2","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-11-13T16:45:32.309589Z","id":"CVE-2025-64429","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:duckdb:duckdb:*:*:*:*:*:*:*:*","versionStartIncluding":"1.4.0","versionEndExcluding":"1.4.2","matchCriteriaId":"4F45224E-AE97-4601-86D7-163A4E531A60"}]}]}],"references":[{"url":"https://duckdb.org/2025/09/16/announcing-duckdb-140.html","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/duckdb/duckdb/blob/029a5b87ff5b1cd22f7f9717d48cd8830d00807c/src/common/random_engine.cpp#L20","source":"security-advisories@github.com","tags":["Product"]},{"url":"https://github.com/duckdb/duckdb/pull/17275","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/duckdb/duckdb/security/advisories/GHSA-vmp8-hg63-v2hp","source":"security-advisories@github.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-53841","sourceIdentifier":"cve@mitre.org","published":"2025-12-03T15:15:51.830","lastModified":"2026-10-18T17:10:00.110","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escalation vulnerability. The service will attempt to read an OpenSSL configuration file from a non-existent location that standard Windows users have default write access to. This allows an unprivileged local user to create a crafted \"openssl.cnf\" file in that location and, by specifying the path to a custom DLL file in a custom OpenSSL engine definition, execute arbitrary commands with the privileges of the Guardicore Agent process. Since Guardicore Agent runs with SYSTEM privileges, this permits an unprivileged user to fully elevate privileges to SYSTEM level in this manner."},{"lang":"es","value":"El Agente de la Plataforma Akamai Guardicore anterior a 52.1.1 permite a un usuario no privilegiado elevar completamente los privilegios a SYSTEM. Esto afecta a las versiones anteriores a 50.15.0, 51.12.0 y 52.1.1."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"Akamai","product":"Guardicore Platform Agent","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"50.15.0","versionType":"custom","status":"affected"},{"version":"51","lessThan":"51.12.0","versionType":"custom","status":"affected"},{"version":"52","lessThan":"52.1.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-03T15:43:47.855576Z","id":"CVE-2025-53841","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@mitre.org","type":"Secondary","description":[{"lang":"en","value":"CWE-829"}]}],"references":[{"url":"https://community.akamai.com/customers/s/article/Windows-Agent-Vulnerability-Summary-and-Resolution","source":"cve@mitre.org"},{"url":"https://techdocs.akamai.com/guardicore-platform-agent/changelog","source":"cve@mitre.org"},{"url":"https://www.akamai.com/blog/security/advisory-cve-2025-53841-guardicore-local-privilege-escalation","source":"cve@mitre.org"},{"url":"https://www.tuv.com/landingpage/en/vulnerability-disclosure/","source":"cve@mitre.org"}]}},{"cve":{"id":"CVE-2025-67900","sourceIdentifier":"cve@mitre.org","published":"2025-12-14T23:15:37.207","lastModified":"2026-10-07T19:10:00.160","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable."},{"lang":"es","value":"El Agente NXLog anterior a 6.11 puede cargar un archivo especificado por la variable de entorno OPENSSL_CONF."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"NXLog","product":"NXLog Agent","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"6.11","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.4,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-15T16:50:42.455770Z","id":"CVE-2025-67900","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@mitre.org","type":"Secondary","description":[{"lang":"en","value":"CWE-829"}]}],"references":[{"url":"https://docs.nxlog.co/agent/current/release-notes.html#nxlog-agent-6-11","source":"cve@mitre.org"}]}},{"cve":{"id":"CVE-2025-14405","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-12-23T22:15:47.077","lastModified":"2026-10-19T22:10:00.130","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows phyiscally-present attackers to escalate privileges on affected installations of PDFsam Enhanced. An attacker must first obtain the ability to mount a malicious drive onto the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-27867."},{"lang":"es","value":"Vulnerabilidad de escalada de privilegios local por elemento de ruta de búsqueda no controlado en PDFsam Enhanced. Esta vulnerabilidad permite a atacantes presentes físicamente escalar privilegios en instalaciones afectadas de PDFsam Enhanced. Un atacante debe obtener primero la capacidad de montar una unidad maliciosa en el sistema objetivo para explotar esta vulnerabilidad.\\n\\nEl defecto específico existe dentro de la configuración de OpenSSL. El producto carga un archivo de configuración de OpenSSL desde una ubicación no segura. Un atacante puede aprovechar esta vulnerabilidad para realizar una escalada de privilegios y ejecutar código arbitrario en el contexto de SYSTEM. Fue ZDI-CAN-27867."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"PDFsam","product":"Enhanced","defaultStatus":"unknown","versions":[{"version":"7.0.76.15222","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.9}],"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":6.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.7,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-30T21:20:13.664998Z","id":"CVE-2025-14405","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pdfsam:enhanced:7.0.76.15222:*:*:*:*:*:*:*","matchCriteriaId":"6BDD768D-D92D-4D1C-977A-3987C03EACD2"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-1093/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-14406","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-12-23T22:15:47.203","lastModified":"2026-10-19T22:10:00.130","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Soda PDF Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25793."},{"lang":"es","value":"Vulnerabilidad de escalada de privilegios local por elemento de ruta de búsqueda no controlado en Soda PDF Desktop. Esta vulnerabilidad permite a atacantes locales escalar privilegios en instalaciones afectadas de Soda PDF Desktop. Un atacante debe primero obtener la capacidad de ejecutar código con bajos privilegios en el sistema objetivo para explotar esta vulnerabilidad.\\n\\nEl fallo específico existe dentro de la configuración de OpenSSL. El producto carga un archivo de configuración de OpenSSL desde una ubicación no segura. Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto de SYSTEM. Fue ZDI-CAN-25793."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Soda PDF","product":"Desktop","defaultStatus":"unknown","versions":[{"version":"14.0.437.22898","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-31T21:06:44.096982Z","id":"CVE-2025-14406","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sodapdf:soda_pdf:14.0.509.23030:*:*:*:*:*:*:*","matchCriteriaId":"ABC0E7B2-E242-4BD7-81E6-BA077750E564"}]}]}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-1079/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-69217","sourceIdentifier":"security-advisories@github.com","published":"2025-12-30T01:15:41.390","lastModified":"2026-10-13T08:10:00.137","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"coturn is a free open source implementation of TURN and STUN Server. Versions 4.6.2r5 through 4.7.0-r4 have a bad random number generator for nonces and port randomization after refactoring. Additionally, random numbers aren't generated with openssl's RAND_bytes but libc's random() (if it's not running on Windows). When fetching about 50 sequential nonces (i.e., through sending 50 unauthenticated allocations requests) it is possible to completely reconstruct the current state of the random number generator, thereby predicting the next nonce. This allows authentication while spoofing IPs. An attacker can send authenticated messages without ever receiving the responses, including the nonce (requires knowledge of the credentials, which is e.g., often the case in IoT settings). Since the port randomization is deterministic given the pseudorandom seed, an attacker can exactly reconstruct the ports and, hence predict the randomization of the ports. If an attacker allocates a relay port, they know the current port, and they are able to predict the next relay port (at least if it is not used before). Commit 11fc465f4bba70bb0ad8aae17d6c4a63a29917d9 contains a fix."},{"lang":"es","value":"coturn es una implementación de código abierto gratuita de servidor TURN y STUN. Las versiones 4.6.2r5 a 4.7.0-r4 tienen un generador de números aleatorios deficiente para nonces y la aleatorización de puertos después de la refactorización. Además, los números aleatorios no se generan con RAND_bytes de OpenSSL sino con random() de libc (si no se ejecuta en Windows). Al obtener aproximadamente 50 nonces secuenciales (es decir, mediante el envío de 50 solicitudes de asignación no autenticadas), es posible reconstruir completamente el estado actual del generador de números aleatorios, prediciendo así el siguiente nonce. Esto permite la autenticación mientras se suplantan IPs. Un atacante puede enviar mensajes autenticados sin recibir nunca las respuestas, incluido el nonce (requiere conocimiento de las credenciales, lo cual es, por ejemplo, a menudo el caso en entornos IoT). Dado que la aleatorización de puertos es determinista dada la semilla pseudoaleatoria, un atacante puede reconstruir exactamente los puertos y, por lo tanto, predecir la aleatorización de los puertos. Si un atacante asigna un puerto de retransmisión, conoce el puerto actual y puede predecir el siguiente puerto de retransmisión (al menos si no se ha utilizado antes). El commit 11fc465f4bba70bb0ad8aae17d6c4a63a29917d9 contiene una solución."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"coturn","product":"coturn","versions":[{"version":">= 4.6.2r5, <= 4.7.0-r4","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","baseScore":7.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.1,"impactScore":4.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-30T13:57:12.783500Z","id":"CVE-2025-69217","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-338"}]}],"references":[{"url":"https://github.com/coturn/coturn/commit/11fc465f4bba70bb0ad8aae17d6c4a63a29917d9","source":"security-advisories@github.com"},{"url":"https://github.com/coturn/coturn/commit/88ced471385869d7e7fbbc4766e78ef521b36af6","source":"security-advisories@github.com"},{"url":"https://github.com/coturn/coturn/security/advisories/GHSA-fvj6-9jhg-9j84","source":"security-advisories@github.com"}]}},{"cve":{"id":"CVE-2026-21444","sourceIdentifier":"security-advisories@github.com","published":"2026-01-02T19:15:48.763","lastModified":"2026-06-17T10:18:40.993","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality. Version 0.10.2 fixes the issue. No known workarounds are available."},{"lang":"es","value":"libtpms, una biblioteca que proporciona emulación de software de un Módulo de Plataforma Confiable, tiene un fallo en las versiones 0.10.0 y 0.10.1. La integración comúnmente utilizada de libtpms con OpenSSL 3.x contenía una vulnerabilidad relacionada con el IV (vector de inicialización) devuelto cuando se utilizaban ciertos cifrados simétricos. En lugar de devolver el último IV, devolvía el IV inicial al llamador, debilitando así los pasos subsiguientes de cifrado y descifrado. La mayor amenaza de esta vulnerabilidad es para la confidencialidad de los datos. La versión 0.10.2 corrige el problema. No se conocen soluciones alternativas disponibles."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"stefanberger","product":"libtpms","versions":[{"version":">= 0.10.0, < 0.10.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-05T20:30:19.842839Z","id":"CVE-2026-21444","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-327"},{"lang":"en","value":"CWE-330"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtpms_project:libtpms:*:*:*:*:*:*:*:*","versionStartIncluding":"0.10.0","versionEndExcluding":"0.10.2","matchCriteriaId":"E714F6E7-EE9D-46ED-B5CF-52EDC67277A8"}]}]}],"references":[{"url":"https://github.com/stefanberger/libtpms/commit/33c9ff074cb16c1841ce7d7f33643c17c426743a","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/stefanberger/libtpms/issues/541","source":"security-advisories@github.com","tags":["Exploit","Issue Tracking"]},{"url":"https://github.com/stefanberger/libtpms/security/advisories/GHSA-7jxr-4j3g-p34f","source":"security-advisories@github.com","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-59464","sourceIdentifier":"support@hackerone.com","published":"2026-01-20T21:16:03.900","lastModified":"2026-06-17T09:46:12.450","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to UTF-8 without freeing the allocated buffer. When applications call `socket.getPeerCertificate(true)`, each certificate field leaks memory, allowing remote clients to trigger steady memory growth through repeated TLS connections. Over time this can lead to resource exhaustion and denial of service."},{"lang":"es","value":"Una fuga de memoria en la integración de OpenSSL de Node.js ocurre al convertir campos de certificado 'X.509' a UTF-8 sin liberar el búfer asignado. Cuando las aplicaciones llaman a 'socket.getPeerCertificate(true)', cada campo de certificado fuga memoria, permitiendo a clientes remotos desencadenar un crecimiento constante de la memoria a través de conexiones TLS repetidas. Con el tiempo, esto puede llevar al agotamiento de recursos y a la denegación de servicio."}],"affected":[{"source":"support@hackerone.com","affectedData":[{"vendor":"nodejs","product":"node","defaultStatus":"unaffected","versions":[{"version":"24.12.0","lessThan":"24.12.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV30":[{"source":"support@hackerone.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-21T20:40:07.879640Z","id":"CVE-2025-59464","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"24.0.0","versionEndExcluding":"24.12.0","matchCriteriaId":"C2C21118-9E06-473D-8287-10F2181A067B"}]}]}],"references":[{"url":"https://nodejs.org/en/blog/vulnerability/december-2025-security-releases","source":"support@hackerone.com","tags":["Release Notes","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-11187","sourceIdentifier":"openssl-security@openssl.org","published":"2026-01-27T16:16:14.093","lastModified":"2026-06-17T08:29:49.083","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation\nwhich can trigger a stack-based buffer overflow, invalid pointer or NULL\npointer dereference during MAC verification.\n\nImpact summary: The stack buffer overflow or NULL pointer dereference may\ncause a crash leading to Denial of Service for an application that parses\nuntrusted PKCS#12 files. The buffer overflow may also potentially enable\ncode execution depending on platform mitigations.\n\nWhen verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2\nsalt and keylength parameters from the file are used without validation.\nIf the value of keylength exceeds the size of the fixed stack buffer used\nfor the derived key (64 bytes), the key derivation will overflow the buffer.\nThe overflow length is attacker-controlled. Also, if the salt parameter is\nnot an OCTET STRING type this can lead to invalid or NULL pointer\ndereference.\n\nExploiting this issue requires a user or application to process\na maliciously crafted PKCS#12 file. It is uncommon to accept untrusted\nPKCS#12 files in applications as they are usually used to store private\nkeys which are trusted by definition. For this reason the issue was assessed\nas Moderate severity.\n\nThe FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as\nPKCS#12 processing is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue.\n\nOpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do\nnot support PBMAC1 in PKCS#12."},{"lang":"es","value":"Resumen del problema: Los parámetros PBMAC1 en archivos PKCS#12 carecen de validación, lo que puede desencadenar un desbordamiento de búfer basado en pila, un puntero inválido o una desreferencia de puntero NULL durante la verificación MAC.\n\nResumen del impacto: El desbordamiento de búfer de pila o la desreferencia de puntero NULL pueden causar un fallo que lleve a una denegación de servicio para una aplicación que analiza archivos PKCS#12 no confiables. El desbordamiento de búfer también puede potencialmente permitir la ejecución de código dependiendo de las mitigaciones de la plataforma.\n\nAl verificar un archivo PKCS#12 que utiliza PBMAC1 para el MAC, los parámetros de sal y longitud de clave (keylength) de PBKDF2 del archivo se utilizan sin validación. Si el valor de la longitud de clave (keylength) excede el tamaño del búfer de pila fijo utilizado para la clave derivada (64 bytes), la derivación de clave desbordará el búfer. La longitud del desbordamiento es controlada por el atacante. Además, si el parámetro de sal no es de tipo OCTET STRING, esto puede llevar a una desreferencia de puntero inválido o NULL.\n\nLa explotación de este problema requiere que un usuario o aplicación procese un archivo PKCS#12 maliciosamente elaborado. Es poco común aceptar archivos PKCS#12 no confiables en aplicaciones, ya que generalmente se utilizan para almacenar claves privadas que son confiables por definición. Por esta razón, el problema fue evaluado como de severidad Moderada.\n\nLos módulos FIPS en 3.6, 3.5 y 3.4 no se ven afectados por este problema, ya que el procesamiento de PKCS#12 está fuera del límite del módulo FIPS de OpenSSL.\n\nOpenSSL 3.6, 3.5 y 3.4 son vulnerables a este problema.\n\nOpenSSL 3.3, 3.0, 1.1.1 y 1.0.2 no se ven afectados por este problema, ya que no soportan PBMAC1 en PKCS#12."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.1","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.5","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":4.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-20T03:55:43.625386Z","id":"CVE-2025-11187","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-476"},{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.4","matchCriteriaId":"B9D3DCAE-317D-4DFB-93F0-7A235A229619"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.5","matchCriteriaId":"1CAC7CBE-EC03-4089-938A-0CEEB2E09B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.1","matchCriteriaId":"68352537-5E99-4F4D-B78A-BCF0353A70A5"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/8caf359d6e46fb413e8f5f0df765d2e8a51df4e8","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/e1079bc17ed93ff16f6b86f33a2fe3336e78817e","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260127.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://github.com/metadust/CVE-2025-11187","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2025-15467","sourceIdentifier":"openssl-security@openssl.org","published":"2026-01-27T16:16:14.257","lastModified":"2026-10-15T02:17:23.440","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with\nmaliciously crafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue."},{"lang":"es","value":"Resumen del problema: Analizar un mensaje CMS AuthEnvelopedData con parámetros AEAD creados maliciosamente puede desencadenar un desbordamiento de búfer de pila.\n\nResumen del impacto: Un desbordamiento de búfer de pila puede provocar un fallo, causando Denegación de Servicio, o potencialmente ejecución remota de código.\n\nAl analizar estructuras CMS AuthEnvelopedData que utilizan cifrados AEAD como AES-GCM, el IV (Vector de Inicialización) codificado en los parámetros ASN.1 se copia en un búfer de pila de tamaño fijo sin verificar que su longitud se ajuste al destino. Un atacante puede proporcionar un mensaje CMS manipulado con un IV de tamaño excesivo, causando una escritura fuera de límites basada en pila antes de que ocurra cualquier autenticación o verificación de etiqueta.\n\nLas aplicaciones y servicios que analizan contenido CMS o PKCS#7 no confiable utilizando cifrados AEAD (por ejemplo, S/MIME AuthEnvelopedData con AES-GCM) son vulnerables. Debido a que el desbordamiento ocurre antes de la autenticación, no se requiere material de clave válido para desencadenarlo. Si bien la explotabilidad para la ejecución remota de código depende de las mitigaciones de la plataforma y la cadena de herramientas, la primitiva de escritura basada en pila representa un riesgo grave.\n\nLos módulos FIPS en 3.6, 3.5, 3.4, 3.3 y 3.0 no se ven afectados por este problema, ya que la implementación de CMS está fuera del límite del módulo FIPS de OpenSSL.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 y 3.0 son vulnerables a este problema.\n\nOpenSSL 1.1.1 y 1.0.2 no se ven afectados por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.1","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.5","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.4","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.19","versionType":"semver","status":"affected"}]}]},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","affectedData":[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"versions":[{"version":"1:3.5.1-7.el10_1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"versions":[{"version":"1:3.2.2-16.el10_0.6","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/a:redhat:enterprise_linux:9","cpe:/o:redhat:enterprise_linux:9"],"versions":[{"version":"1:3.5.1-7.el9_7","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/a:redhat:rhel_e4s:9.0"],"versions":[{"version":"1:3.0.1-46.el9_0.7","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/a:redhat:rhel_e4s:9.2"],"versions":[{"version":"1:3.0.7-18.el9_2.3","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/a:redhat:rhel_eus:9.4"],"versions":[{"version":"1:3.0.7-29.el9_4.2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/a:redhat:rhel_eus:9.6"],"versions":[{"version":"1:3.2.2-7.el9_6.2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Core Services 2.4.62.SP3","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/a:redhat:jboss_core_services:1"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhcos","cpes":["cpe:/a:redhat:openshift:4.13::el9"],"versions":[{"version":"413.92.202602240113-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhcos","cpes":["cpe:/a:redhat:openshift:4.14::el9"],"versions":[{"version":"414.92.202602171627-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhcos","cpes":["cpe:/a:redhat:openshift:4.15::el9"],"versions":[{"version":"415.92.202603101737-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhcos","cpes":["cpe:/a:redhat:openshift:4.16::el9"],"versions":[{"version":"416.94.202602101357-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhcos","cpes":["cpe:/a:redhat:openshift:4.17::el9"],"versions":[{"version":"417.94.202602090846-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhcos","cpes":["cpe:/a:redhat:openshift:4.18::el9"],"versions":[{"version":"418.94.202602022246-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhcos","cpes":["cpe:/a:redhat:openshift:4.19::el9"],"versions":[{"version":"4.19.9.6.202602112047-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.20","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhcos","cpes":["cpe:/a:redhat:openshift:4.20::el9"],"versions":[{"version":"4.20.9.6.202602050328-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Service Interconnect 1 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"service-interconnect/skupper-config-sync-rhel9","cpes":["cpe:/a:redhat:service_interconnect:1::el9"],"versions":[{"version":"1.8.8-1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Service Interconnect 1 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"service-interconnect/skupper-controller-podman-container-rhel9","cpes":["cpe:/a:redhat:service_interconnect:1::el9"],"versions":[{"version":"1.8.8-1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Service Interconnect 1 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"service-interconnect/skupper-controller-podman-rhel9","cpes":["cpe:/a:redhat:service_interconnect:1::el9"],"versions":[{"version":"1.8.8-1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Service Interconnect 1 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"service-interconnect/skupper-flow-collector-rhel9","cpes":["cpe:/a:redhat:service_interconnect:1::el9"],"versions":[{"version":"1.8.8-1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Service Interconnect 1 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"service-interconnect/skupper-operator-bundle","cpes":["cpe:/a:redhat:service_interconnect:1::el9"],"versions":[{"version":"1.8.8-1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Service Interconnect 1 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"service-interconnect/skupper-router-rhel9","cpes":["cpe:/a:redhat:service_interconnect:1::el9"],"versions":[{"version":"2.7.6-5","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Service Interconnect 1 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"service-interconnect/skupper-service-controller-rhel9","cpes":["cpe:/a:redhat:service_interconnect:1::el9"],"versions":[{"version":"1.8.8-1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Service Interconnect 1 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"service-interconnect/skupper-site-controller-rhel9","cpes":["cpe:/a:redhat:service_interconnect:1::el9"],"versions":[{"version":"1.8.8-1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Cost Management 4","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"costmanagement/costmanagement-metrics-rhel9-operator","cpes":["cpe:/a:redhat:cost_management:4::el9"],"versions":[{"version":"1770836349","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhaiis/vllm-cuda-rhel9","cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"versions":[{"version":"1772160593","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat AI Inference Server 3.2","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhaiis/vllm-rocm-rhel9","cpes":["cpe:/a:redhat:ai_inference_server:3.2::el9"],"versions":[{"version":"1772160625","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Discovery 2","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"discovery/discovery-server-rhel9","cpes":["cpe:/a:redhat:discovery:2::el9"],"versions":[{"version":"1769104765","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Discovery 2","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"discovery/discovery-ui-rhel9","cpes":["cpe:/a:redhat:discovery:2::el9"],"versions":[{"version":"1769111774","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl-main","cpes":["cpe:/a:redhat:hummingbird:1"],"versions":[{"version":"3.5.6-0.1.hum1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"insights-proxy/insights-proxy-container-rhel9","cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"versions":[{"version":"1770740405","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces (RHOSDS) 3.26","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"devspaces/code-sshd-rhel9","cpes":["cpe:/a:redhat:openshift_devspaces:3.26::el9"],"versions":[{"version":"1770494649","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces (RHOSDS) 3.26","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"devspaces/configbump-rhel9","cpes":["cpe:/a:redhat:openshift_devspaces:3.26::el9"],"versions":[{"version":"1770404535","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces (RHOSDS) 3.26","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"devspaces/dashboard-rhel9","cpes":["cpe:/a:redhat:openshift_devspaces:3.26::el9"],"versions":[{"version":"1770764461","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces (RHOSDS) 3.26","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"devspaces/devspaces-rhel9-operator","cpes":["cpe:/a:redhat:openshift_devspaces:3.26::el9"],"versions":[{"version":"1770494431","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces (RHOSDS) 3.26","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"devspaces/imagepuller-rhel9","cpes":["cpe:/a:redhat:openshift_devspaces:3.26::el9"],"versions":[{"version":"1770404517","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces (RHOSDS) 3.26","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"devspaces/jetbrains-ide-rhel9","cpes":["cpe:/a:redhat:openshift_devspaces:3.26::el9"],"versions":[{"version":"1770759517","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces (RHOSDS) 3.26","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"devspaces/machineexec-rhel9","cpes":["cpe:/a:redhat:openshift_devspaces:3.26::el9"],"versions":[{"version":"1770404430","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces (RHOSDS) 3.26","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"devspaces/openvsx-rhel9","cpes":["cpe:/a:redhat:openshift_devspaces:3.26::el9"],"versions":[{"version":"1770851052","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces (RHOSDS) 3.26","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"devspaces/pluginregistry-rhel9","cpes":["cpe:/a:redhat:openshift_devspaces:3.26::el9"],"versions":[{"version":"1770918006","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces (RHOSDS) 3.26","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"devspaces/traefik-rhel9","cpes":["cpe:/a:redhat:openshift_devspaces:3.26::el9"],"versions":[{"version":"1770494726","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/installer-rhel9","cpes":["cpe:/a:redhat:rhui:5::el9"],"versions":[{"version":"1770646925","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/cds-rhel9","cpes":["cpe:/a:redhat:rhui:5::el9"],"versions":[{"version":"1773670073","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/haproxy-rhel9","cpes":["cpe:/a:redhat:rhui:5::el9"],"versions":[{"version":"1773672059","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/rhua-rhel9","cpes":["cpe:/a:redhat:rhui:5::el9"],"versions":[{"version":"1773670137","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"edk2","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim-unsigned-aarch64","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim-unsigned-x64","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ovmf","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"compat-openssl10","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"edk2","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"mingw-openssl","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim-unsigned-x64","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"compat-openssl11","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"edk2","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim-unsigned-aarch64","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim-unsigned-x64","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-9","cpes":["cpe:/a:redhat:openshift:4"]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"AI Lightweight Inference Server","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Connector for Azure","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.8.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Databus","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Desigo CC family V7","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Desigo CC family V8","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Desigo CC family V9","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V9.0 QU1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"HiMed Cockpit","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM RM1224 LTE(4G) EU","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM RM1224 LTE(4G) NAM","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX MX5000","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX MX5000RE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1400","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1500","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1501","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1510","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1511","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1512","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1524","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX1536","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"RUGGEDCOM ROX RX5000","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE LPE9403","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE LPE9413","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE LPE9433","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M804PB","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M812-1 ADSL-Router family","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M816-1 ADSL-Router family","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M826-2 SHDSL-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M874-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M874-3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M874-3 3G-Router (CN)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-3 (ROK)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-4","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-4 (EU)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE M876-4 (NAM)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUB852-1 (A1)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUB852-1 (B1)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM853-1 (A1)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM853-1 (B1)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM853-1 (EU)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (A1)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (B1)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (CN)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (EU)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (RoW)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE S615 EEC LAN-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE S615 LAN-Router","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE SC622-2C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE SC626-2C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE SC632-2C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE SC636-2C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE SC642-2C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE SC646-2C","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE WAB762-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM763-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM763-1 (ME)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM763-1 (US)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM766-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM766-1 (ME)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM766-1 (US)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM766-1 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM766-1 EEC (ME)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WAM766-1 EEC (US)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUB762-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUB762-1 iFeatures","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUM763-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUM763-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUM763-1 (US)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUM763-1 (US)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUM766-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUM766-1 (ME)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE WUM766-1 (USA)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE X200-4P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X200-4P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X201-3P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X201-3P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X201-3P IRT PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X201-3P IRT PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X202-2IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X202-2IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X202-2P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X202-2P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X202-2P IRT PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X202-2P IRT PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2FM","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2LD TS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X204-2TS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X204IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X204IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X204IRT PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X204IRT PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X204RNA (HSR)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X204RNA (PRP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X204RNA EEC (HSR)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X204RNA EEC (PRP)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X204RNA EEC (PRP/HSR)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X206-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X206-1LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X208","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X208PRO","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X212-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X212-2LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X216","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X224","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (230V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (24V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (2x 230V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (2x 230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (2x 24V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X302-7 EEC (2x 24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X304-2FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X306-1LD FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (230V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (24V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (2x 230V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (2x 230V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (2x 24V, coated)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X307-2 EEC (2x 24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X307-3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X307-3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X307-3LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X307-3LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LD","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LH","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LH","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LH+","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2LH+","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M PoE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M PoE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M TS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X308-2M TS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X310","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X310","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X310FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X310FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X320-1 FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X320-1-2LD FE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE X408-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XC316-8","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC324-4","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC324-4 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC332","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC416-8","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC424-4","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XC432","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XF201-3P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XF202-2P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XF204","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XF204-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XF204-2BA IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XF204IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XF204IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XF206-1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XF208","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR302-32","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR302-32","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR302-32","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR322-12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR322-12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR322-12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (230V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (230V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (230V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (230V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M TS (24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-12M TS (24V)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M EEC (2x 24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (230V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (230V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (230V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (230V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE (24V, ports on rear)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE TS (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR324-4M PoE TS (24V, ports on front)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SCALANCE XR326-8","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR326-8","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR326-8","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR326-8 EEC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR502-32","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR502-32","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR502-32","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR522-12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR522-12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR522-12","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR524-8WG","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR524-8WG","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR524-8WG","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR524-8WG","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR526-8","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR526-8","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SCALANCE XR526-8","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Shopfloor IT Suite","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIDIS Prime","defaultStatus":"unknown","versions":[{"version":"V4.0.700","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Siemens OPC UA Modelling Editor (SiOME)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC eaSie Core Package","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC eaSie PCS 7 Skill Package","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC HMI Basic Panels","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SIMATIC HMI Comfort Panels","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SIMATIC HMI Mobile Panels","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SIMATIC Industrial Thin Client","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SIMATIC IoT2050 Advanced","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC IPC BX-21A","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC IPC MD-57A","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC IPC ORCLA","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC Logon V1.6","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.6 Upd12","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC Logon V2.0","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV530 H","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV530 S","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV540 H","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV540 H CRANES","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV540 S","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV550 H","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV550 S","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV560 U","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC MV560 X","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC PCS neo V6.0","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC PDM V9.3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V9.3 SP2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RTLS Locating Manager","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RTLS Locating Manager","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RTLS Locating Manager","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RTLS Locating Manager","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RTLS Locating Manager","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RTLS Locating Manager","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC RTLS Locating Manager","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC STEP 7 V5","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.7 SP4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC Target","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC OA V3.19","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.19 P024","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC OA V3.20","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.20 P012","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC OA V3.21","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.21 P02","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC Runtime Advanced V17","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V17 Update 9","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC Unified Sequence","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V21","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC V7.5","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC V8.0","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC V8.1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMOTION OACAMGEN","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMOVE Fleetmanager V3.1","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.1.13","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMOVE Fleetmanager V3.2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.2.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMOVE Fleetmanager V3.3","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.3.2","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAMICS G200","defaultStatus":"unknown","versions":[{"version":"V6.3","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAMICS G220","defaultStatus":"unknown","versions":[{"version":"V6.3","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAMICS S200","defaultStatus":"unknown","versions":[{"version":"V6.3","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAMICS S210","defaultStatus":"unknown","versions":[{"version":"V6.3","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINAMICS S220","defaultStatus":"unknown","versions":[{"version":"V6.3","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEC INS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.0 SP2 Update 5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEC NMS","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINEC Security Monitor","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SINUMERIK Access MyMachine /OPC UA","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.2 SP3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLANT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS NET SCALANCE X202-2P IRT","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SIPLUS NET SCALANCE X308-2","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SITRANS ASM IQ","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SITRANS Soft Sensor Engine IQ (SITRANS SSE IQ)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"User Management Component (UMC)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.15.3.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Visual Inspection Cockpit","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-19T00:00:00+00:00","id":"CVE-2025-15467","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.19","matchCriteriaId":"C76C5F55-5243-4461-82F5-2FEBFF4D59FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.0","versionEndExcluding":"3.3.6","matchCriteriaId":"791BA794-23EF-4671-B96B-3A7E3BF52490"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.4","matchCriteriaId":"B9D3DCAE-317D-4DFB-93F0-7A235A229619"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.5","matchCriteriaId":"1CAC7CBE-EC03-4089-938A-0CEEB2E09B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.1","matchCriteriaId":"68352537-5E99-4F4D-B78A-BCF0353A70A5"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260127.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/01/27/10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2026/02/25/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://access.redhat.com/errata/RHSA-2026:1472","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:1473","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:1496","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:1503","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:1519","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:1594","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:1733","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:1736","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:2072","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:2077","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:2485","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:2563","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:2633","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:2659","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:2671","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:2844","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:2974","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:2995","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:3228","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:3415","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:3461","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:3462","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:4419","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:4943","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:6481","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:7261","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/security/cve/CVE-2025-15467","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2430376","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-434797.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-734552.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://github.com/guiimoraes/CVE-2025-15467","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15467.json","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}]}},{"cve":{"id":"CVE-2025-15468","sourceIdentifier":"openssl-security@openssl.org","published":"2026-01-27T16:16:14.400","lastModified":"2026-06-17T08:37:50.723","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue."},{"lang":"es","value":"Resumen del problema: Si una aplicación que utiliza la función SSL_CIPHER_find() en un cliente o servidor del protocolo QUIC recibe un conjunto de cifrado desconocido del par, ocurre una desreferencia de NULL.\n\nResumen del impacto: Una desreferencia de puntero NULL conduce a la terminación anormal del proceso en ejecución causando Denegación de Servicio.\n\nAlgunas aplicaciones llaman a SSL_CIPHER_find() desde la devolución de llamada client_hello_cb en el ID de cifrado recibido del par. Si esto se hace con un objeto SSL que implementa el protocolo QUIC, ocurrirá una desreferencia de puntero NULL si el ID de cifrado examinado es desconocido o no compatible.\n\nComo no es muy común llamar a esta función en aplicaciones que utilizan el protocolo QUIC y el peor resultado es Denegación de Servicio, el problema fue evaluado como de baja severidad.\n\nEl código vulnerable fue introducido en la versión 3.2 con la adición del soporte para el protocolo QUIC.\n\nLos módulos FIPS en 3.6, 3.5, 3.4 y 3.3 no se ven afectados por este problema, ya que la implementación de QUIC está fuera del límite del módulo FIPS de OpenSSL.\n\nOpenSSL 3.6, 3.5, 3.4 y 3.3 son vulnerables a este problema.\n\nOpenSSL 3.0, 1.1.1 y 1.0.2 no se ven afectados por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.1","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.5","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.4","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-29T14:52:10.289567Z","id":"CVE-2025-15468","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.6","matchCriteriaId":"F5292E9E-6B50-409F-9219-7B0A04047AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.4","matchCriteriaId":"B9D3DCAE-317D-4DFB-93F0-7A235A229619"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.5","matchCriteriaId":"1CAC7CBE-EC03-4089-938A-0CEEB2E09B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.1","matchCriteriaId":"68352537-5E99-4F4D-B78A-BCF0353A70A5"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/1f08e54bad32843044fe8a675948d65e3b4ece65","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7c88376731c589ee5b36116c5a6e32d5ae5f7ae2","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/b2539639400288a4580fe2d76247541b976bade4","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/d75b309879631d45b972396ce4e5102559c64ac7","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260127.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-15469","sourceIdentifier":"openssl-security@openssl.org","published":"2026-01-27T16:16:14.523","lastModified":"2026-06-17T08:37:50.893","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: The 'openssl dgst' command-line tool silently truncates input\ndata to 16MB when using one-shot signing algorithms and reports success instead\nof an error.\n\nImpact summary: A user signing or verifying files larger than 16MB with\none-shot algorithms (such as Ed25519, Ed448, or ML-DSA) may believe the entire\nfile is authenticated while trailing data beyond 16MB remains unauthenticated.\n\nWhen the 'openssl dgst' command is used with algorithms that only support\none-shot signing (Ed25519, Ed448, ML-DSA-44, ML-DSA-65, ML-DSA-87), the input\nis buffered with a 16MB limit. If the input exceeds this limit, the tool\nsilently truncates to the first 16MB and continues without signaling an error,\ncontrary to what the documentation states. This creates an integrity gap where\ntrailing bytes can be modified without detection if both signing and\nverification are performed using the same affected codepath.\n\nThe issue affects only the command-line tool behavior. Verifiers that process\nthe full message using library APIs will reject the signature, so the risk\nprimarily affects workflows that both sign and verify with the affected\n'openssl dgst' command. Streaming digest algorithms for 'openssl dgst' and\nlibrary users are unaffected.\n\nThe FIPS modules in 3.5 and 3.6 are not affected by this issue, as the\ncommand-line tools are outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.5 and 3.6 are vulnerable to this issue.\n\nOpenSSL 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue."},{"lang":"es","value":"Resumen del problema: La herramienta de línea de comandos 'openssl dgst' trunca silenciosamente los datos de entrada a 16MB cuando se utilizan algoritmos de firma de un solo paso e informa éxito en lugar de un error.\n\nResumen del impacto: Un usuario que firma o verifica archivos de más de 16MB con algoritmos de un solo paso (como Ed25519, Ed448 o ML-DSA) puede creer que el archivo completo está autenticado mientras que los datos finales más allá de 16MB permanecen sin autenticar.\n\nCuando se utiliza el comando 'openssl dgst' con algoritmos que solo admiten la firma de un solo paso (Ed25519, Ed448, ML-DSA-44, ML-DSA-65, ML-DSA-87), la entrada se almacena en búfer con un límite de 16MB. Si la entrada excede este límite, la herramienta trunca silenciosamente a los primeros 16MB y continúa sin señalar un error, contrario a lo que establece la documentación. Esto crea una brecha de integridad donde los bytes finales pueden modificarse sin detección si tanto la firma como la verificación se realizan utilizando la misma ruta de código afectada.\n\nEl problema afecta solo el comportamiento de la herramienta de línea de comandos. Los verificadores que procesan el mensaje completo utilizando las API de la librería rechazarán la firma, por lo que el riesgo afecta principalmente a los flujos de trabajo que tanto firman como verifican con el comando 'openssl dgst' afectado. Los algoritmos de resumen por streaming para 'openssl dgst' y los usuarios de la librería no se ven afectados.\n\nLos módulos FIPS en 3.5 y 3.6 no se ven afectados por este problema, ya que las herramientas de línea de comandos están fuera del límite del módulo FIPS de OpenSSL.\n\nOpenSSL 3.5 y 3.6 son vulnerables a este problema.\n\nOpenSSL 3.4, 3.3, 3.0, 1.1.1 y 1.0.2 no se ven afectados por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.1","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-29T14:54:00.486808Z","id":"CVE-2025-15469","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.5","matchCriteriaId":"1CAC7CBE-EC03-4089-938A-0CEEB2E09B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.1","matchCriteriaId":"68352537-5E99-4F4D-B78A-BCF0353A70A5"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/310f305eb92ea8040d6b3cb75a5feeba8e6acf2f","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260127.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-66199","sourceIdentifier":"openssl-security@openssl.org","published":"2026-01-27T16:16:15.777","lastModified":"2026-06-17T09:56:27.733","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A TLS 1.3 connection using certificate compression can be\nforced to allocate a large buffer before decompression without checking\nagainst the configured certificate size limit.\n\nImpact summary: An attacker can cause per-connection memory allocations of\nup to approximately 22 MiB and extra CPU work, potentially leading to\nservice degradation or resource exhaustion (Denial of Service).\n\nIn affected configurations, the peer-supplied uncompressed certificate\nlength from a CompressedCertificate message is used to grow a heap buffer\nprior to decompression. This length is not bounded by the max_cert_list\nsetting, which otherwise constrains certificate message sizes. An attacker\ncan exploit this to cause large per-connection allocations followed by\nhandshake failure. No memory corruption or information disclosure occurs.\n\nThis issue only affects builds where TLS 1.3 certificate compression is\ncompiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression\nalgorithm (brotli, zlib, or zstd) is available, and where the compression\nextension is negotiated. Both clients receiving a server CompressedCertificate\nand servers in mutual TLS scenarios receiving a client CompressedCertificate\nare affected. Servers that do not request client certificates are not\nvulnerable to client-initiated attacks.\n\nUsers can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION\nto disable receiving compressed certificates.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the TLS implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue."},{"lang":"es","value":"Resumen del problema: Una conexión TLS 1.3 que utiliza compresión de certificados puede ser forzada a asignar un búfer grande antes de la descompresión sin verificar contra el límite de tamaño de certificado configurado.\n\nResumen del impacto: Un atacante puede causar asignaciones de memoria por conexión de hasta aproximadamente 22 MiB y trabajo adicional de CPU, lo que podría llevar a degradación del servicio o agotamiento de recursos (denegación de servicio).\n\nEn configuraciones afectadas, la longitud del certificado sin comprimir proporcionada por el par de un mensaje CompressedCertificate se utiliza para aumentar un búfer de pila antes de la descompresión. Esta longitud no está limitada por la configuración max_cert_list, que de otro modo restringe los tamaños de los mensajes de certificado. Un atacante puede explotar esto para causar grandes asignaciones por conexión seguidas de un fallo en el handshake. No ocurre corrupción de memoria ni revelación de información.\n\nEste problema solo afecta a las compilaciones donde la compresión de certificados TLS 1.3 está compilada (es decir, no OPENSSL_NO_COMP_ALG) y al menos un algoritmo de compresión (brotli, zlib o zstd) está disponible, y donde la extensión de compresión es negociada. Tanto los clientes que reciben un CompressedCertificate del servidor como los servidores en escenarios TLS mutuos que reciben un CompressedCertificate del cliente se ven afectados. Los servidores que no solicitan certificados de cliente no son vulnerables a ataques iniciados por el cliente.\n\nLos usuarios pueden mitigar este problema configurando SSL_OP_NO_RX_CERTIFICATE_COMPRESSION para deshabilitar la recepción de certificados comprimidos.\n\nLos módulos FIPS en 3.6, 3.5, 3.4 y 3.3 no se ven afectados por este problema, ya que la implementación de TLS está fuera del límite del módulo FIPS de OpenSSL.\n\nOpenSSL 3.6, 3.5, 3.4 y 3.3 son vulnerables a este problema.\n\nOpenSSL 3.0, 1.1.1 y 1.0.2 no se ven afectados por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.1","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.5","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.4","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-29T15:03:12.594458Z","id":"CVE-2025-66199","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-789"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.6","matchCriteriaId":"F5292E9E-6B50-409F-9219-7B0A04047AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.4","matchCriteriaId":"B9D3DCAE-317D-4DFB-93F0-7A235A229619"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.5","matchCriteriaId":"1CAC7CBE-EC03-4089-938A-0CEEB2E09B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.1","matchCriteriaId":"68352537-5E99-4F4D-B78A-BCF0353A70A5"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/6184a4fb08ee6d7bca570d931a4e8bef40b64451","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/895150b5e021d16b52fb32b97e1dd12f20448be5","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/966a2478046c311ed7dae50c457d0db4cafbf7e4","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260127.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-68160","sourceIdentifier":"openssl-security@openssl.org","published":"2026-01-27T16:16:15.900","lastModified":"2026-06-17T09:58:39.407","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Writing large, newline-free data into a BIO chain using the\nline-buffering filter where the next BIO performs short writes can trigger\na heap-based out-of-bounds write.\n\nImpact summary: This out-of-bounds write can cause memory corruption which\ntypically results in a crash, leading to Denial of Service for an application.\n\nThe line-buffering BIO filter (BIO_f_linebuffer) is not used by default in\nTLS/SSL data paths. In OpenSSL command-line applications, it is typically\nonly pushed onto stdout/stderr on VMS systems. Third-party applications that\nexplicitly use this filter with a BIO chain that can short-write and that\nwrite large, newline-free data influenced by an attacker would be affected.\nHowever, the circumstances where this could happen are unlikely to be under\nattacker control, and BIO_f_linebuffer is unlikely to be handling non-curated\ndata controlled by an attacker. For that reason the issue was assessed as\nLow severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the BIO implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue."},{"lang":"es","value":"Resumen del problema: Escribir datos grandes y sin saltos de línea en una cadena BIO usando el filtro de búfer de línea, donde el siguiente BIO realiza escrituras cortas, puede desencadenar una escritura fuera de límites basada en el montón.\n\nResumen del impacto: Esta escritura fuera de límites puede causar corrupción de memoria, lo que típicamente resulta en un fallo, llevando a una denegación de servicio para una aplicación.\n\nEl filtro BIO de búfer de línea (BIO_f_linebuffer) no se usa por defecto en las rutas de datos TLS/SSL. En las aplicaciones de línea de comandos de OpenSSL, típicamente solo se envía a stdout/stderr en sistemas VMS. Las aplicaciones de terceros que usan explícitamente este filtro con una cadena BIO que puede realizar escrituras cortas y que escriben datos grandes y sin saltos de línea influenciados por un atacante se verían afectadas. Sin embargo, es poco probable que las circunstancias en las que esto podría ocurrir estén bajo el control del atacante, y es poco probable que BIO_f_linebuffer esté manejando datos no curados controlados por un atacante. Por esa razón, el problema fue evaluado como de baja severidad.\n\nLos módulos FIPS en 3.6, 3.5, 3.4, 3.3 y 3.0 no se ven afectados por este problema, ya que la implementación de BIO está fuera del límite del módulo FIPS de OpenSSL.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 y 1.0.2 son vulnerables a este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.1","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.5","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.4","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.19","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1ze","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zn","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":4.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-29T15:04:54.880991Z","id":"CVE-2025-68160","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zn","matchCriteriaId":"6A8EC60C-05EC-4886-8C82-63AEF4BDA8D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1ze","matchCriteriaId":"E000B986-6A31-468F-9EA3-B9D16DB16FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.19","matchCriteriaId":"C76C5F55-5243-4461-82F5-2FEBFF4D59FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.6","matchCriteriaId":"F5292E9E-6B50-409F-9219-7B0A04047AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.4","matchCriteriaId":"B9D3DCAE-317D-4DFB-93F0-7A235A229619"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.5","matchCriteriaId":"1CAC7CBE-EC03-4089-938A-0CEEB2E09B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.1","matchCriteriaId":"68352537-5E99-4F4D-B78A-BCF0353A70A5"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260127.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-69418","sourceIdentifier":"openssl-security@openssl.org","published":"2026-01-27T16:16:33.253","lastModified":"2026-06-17T10:00:39.647","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: The trailing 1-15 bytes of a message may be exposed in<br>cleartext on encryption and are not covered by the authentication tag,<br>allowing an attacker to read or tamper with those bytes without detection.<br><br>The low-level OCB encrypt and decrypt routines in the hardware-accelerated<br>stream path process full 16-byte blocks but do not advance the input/output<br>pointers. The subsequent tail-handling code then operates on the original<br>base pointers, effectively reprocessing the beginning of the buffer while<br>leaving the actual trailing bytes unprocessed. The authentication checksum<br>also excludes the true tail bytes.<br><br>However, typical OpenSSL consumers using EVP are not affected because the<br>higher-level EVP and provider OCB implementations split inputs so that full<br>blocks and trailing partial blocks are processed in separate calls, avoiding<br>the problematic code path. Additionally, TLS does not use OCB ciphersuites.<br>The vulnerability only affects applications that call the low-level<br>CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with<br>non-block-aligned lengths in a single call on hardware-accelerated builds.<br>For these reasons the issue was assessed as Low severity.<br><br>The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected<br>by this issue, as OCB mode is not a FIPS-approved algorithm.<br><br>OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.<br><br>OpenSSL 1.0.2 is not affected by this issue."},{"lang":"es","value":"Resumen del problema: Al usar la API OCB de bajo nivel directamente con AES-NI u otras rutas de código aceleradas por hardware, las entradas cuya longitud no es un múltiplo de 16 bytes pueden dejar el bloque parcial final sin cifrar y sin autenticar.\nResumen del impacto: Los últimos 1-15 bytes de un mensaje pueden quedar expuestos en texto claro durante el cifrado y no están cubiertos por la etiqueta de autenticación, lo que permite a un atacante leer o manipular esos bytes sin ser detectado. Las rutinas de cifrado y descifrado OCB de bajo nivel en la ruta de flujo acelerada por hardware procesan bloques completos de 16 bytes, pero no avanzan los punteros de entrada/salida. El código posterior de manejo de la cola opera entonces sobre los punteros base originales, reprocesando efectivamente el inicio del búfer mientras deja los bytes finales reales sin procesar. La suma de verificación de autenticación también excluye los verdaderos bytes de la cola. Sin embargo, los consumidores típicos de OpenSSL que usan EVP no se ven afectados porque las implementaciones OCB de EVP y del proveedor de nivel superior dividen las entradas de modo que los bloques completos y los bloques parciales finales se procesan en llamadas separadas, evitando la ruta de código problemática. Además, TLS no utiliza conjuntos de cifrado OCB. La vulnerabilidad solo afecta a las aplicaciones que llaman directamente a las funciones de bajo nivel CRYPTO_ocb128_encrypt() o CRYPTO_ocb128_decrypt() con longitudes no alineadas a bloques en una sola llamada en compilaciones aceleradas por hardware. Por estas razones, el problema se evaluó como de baja severidad. Los módulos FIPS en 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 y 3.0 no se ven afectados por este problema, ya que el modo OCB no es un algoritmo aprobado por FIPS. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 y 1.1.1 son vulnerables a este problema. OpenSSL 1.0.2 no se ve afectado por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.1","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.5","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.4","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.19","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1ze","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.4,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-29T15:06:43.617751Z","id":"CVE-2025-69418","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-325"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1ze","matchCriteriaId":"E000B986-6A31-468F-9EA3-B9D16DB16FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.19","matchCriteriaId":"C76C5F55-5243-4461-82F5-2FEBFF4D59FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.6","matchCriteriaId":"F5292E9E-6B50-409F-9219-7B0A04047AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.4","matchCriteriaId":"B9D3DCAE-317D-4DFB-93F0-7A235A229619"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.5","matchCriteriaId":"1CAC7CBE-EC03-4089-938A-0CEEB2E09B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.1","matchCriteriaId":"68352537-5E99-4F4D-B78A-BCF0353A70A5"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260127.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-69419","sourceIdentifier":"openssl-security@openssl.org","published":"2026-01-27T16:16:34.113","lastModified":"2026-06-17T10:00:39.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously\ncrafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing\nnon-ASCII BMP code point can trigger a one byte write before the allocated\nbuffer.\n\nImpact summary: The out-of-bounds write can cause a memory corruption\nwhich can have various consequences including a Denial of Service.\n\nThe OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12\nBMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes,\nthe helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16\nsource byte count as the destination buffer capacity to UTF8_putc(). For BMP\ncode points above U+07FF, UTF-8 requires three bytes, but the forwarded\ncapacity can be just two bytes. UTF8_putc() then returns -1, and this negative\nvalue is added to the output length without validation, causing the\nlength to become negative. The subsequent trailing NUL byte is then written\nat a negative offset, causing write outside of heap allocated buffer.\n\nThe vulnerability is reachable via the public PKCS12_get_friendlyname() API\nwhen parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a\ndifferent code path that avoids this issue, PKCS12_get_friendlyname() directly\ninvokes the vulnerable function. Exploitation requires an attacker to provide\na malicious PKCS#12 file to be parsed by the application and the attacker\ncan just trigger a one zero byte write before the allocated buffer.\nFor that reason the issue was assessed as Low severity according to our\nSecurity Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue."},{"lang":"es","value":"Resumen del problema: Llamar a la función PKCS12_get_friendlyname() en un archivo PKCS#12 creado maliciosamente con un nombre descriptivo BMPString (UTF-16BE) que contiene un punto de código BMP no ASCII puede desencadenar una escritura de un byte antes del búfer asignado.\n\nResumen del impacto: La escritura fuera de límites puede causar una corrupción de memoria que puede tener varias consecuencias, incluyendo una denegación de servicio.\n\nLa función OPENSSL_uni2utf8() realiza una conversión en dos pasadas de un BMPString (UTF-16BE) de PKCS#12 a UTF-8. En la segunda pasada, al emitir bytes UTF-8, la función auxiliar bmp_to_utf8() reenvía incorrectamente el recuento de bytes fuente UTF-16 restantes como la capacidad del búfer de destino a UTF8_putc(). Para puntos de código BMP superiores a U+07FF, UTF-8 requiere tres bytes, pero la capacidad reenviada puede ser de solo dos bytes. UTF8_putc() luego devuelve -1, y este valor negativo se añade a la longitud de salida sin validación, haciendo que la longitud se vuelva negativa. El subsiguiente byte NUL final se escribe entonces en un desplazamiento negativo, causando una escritura fuera del búfer asignado en el heap.\n\nLa vulnerabilidad es alcanzable a través de la API pública PKCS12_get_friendlyname() al analizar archivos PKCS#12 controlados por el atacante. Si bien PKCS12_parse() utiliza una ruta de código diferente que evita este problema, PKCS12_get_friendlyname() invoca directamente la función vulnerable. La explotación requiere que un atacante proporcione un archivo PKCS#12 malicioso para ser analizado por la aplicación y el atacante puede simplemente desencadenar una escritura de un byte cero antes del búfer asignado. Por esa razón, el problema fue evaluado como de baja severidad según nuestra Política de Seguridad.\n\nLos módulos FIPS en 3.6, 3.5, 3.4, 3.3 y 3.0 no se ven afectados por este problema, ya que la implementación de PKCS#12 está fuera del límite del módulo FIPS de OpenSSL.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 y 1.1.1 son vulnerables a este problema.\n\nOpenSSL 1.0.2 no se ve afectado por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.1","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.5","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.4","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.19","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1ze","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-29T15:09:04.605559Z","id":"CVE-2025-69419","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1ze","matchCriteriaId":"E000B986-6A31-468F-9EA3-B9D16DB16FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.19","matchCriteriaId":"C76C5F55-5243-4461-82F5-2FEBFF4D59FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.6","matchCriteriaId":"F5292E9E-6B50-409F-9219-7B0A04047AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.4","matchCriteriaId":"B9D3DCAE-317D-4DFB-93F0-7A235A229619"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.5","matchCriteriaId":"1CAC7CBE-EC03-4089-938A-0CEEB2E09B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.1","matchCriteriaId":"68352537-5E99-4F4D-B78A-BCF0353A70A5"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260127.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-69420","sourceIdentifier":"openssl-security@openssl.org","published":"2026-01-27T16:16:34.317","lastModified":"2026-06-17T10:00:40.067","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue."},{"lang":"es","value":"Resumen del problema: Existe una vulnerabilidad de confusión de tipos en el código de verificación de la Respuesta de Marca de Tiempo donde se accede a un miembro de unión ASN1_TYPE sin validar primero el tipo, causando una desreferencia de puntero inválido o NULL al procesar un archivo de Respuesta de Marca de Tiempo malformado.\n\nResumen del impacto: Una aplicación que llama a TS_RESP_verify_response() con una Respuesta de Marca de Tiempo malformada puede ser inducida a desreferenciar un puntero inválido o NULL al leer, resultando en una denegación de servicio.\n\nLas funciones ossl_ess_get_signing_cert() y ossl_ess_get_signing_cert_v2() acceden al valor del atributo del certificado de firma sin validar su tipo. Cuando el tipo no es V_ASN1_SEQUENCE, esto resulta en el acceso a memoria inválida a través de la unión ASN1_TYPE, causando un fallo.\n\nExplotar esta vulnerabilidad requiere que un atacante proporcione una Respuesta de Marca de Tiempo malformada a una aplicación que verifica las respuestas de marca de tiempo. El protocolo de Marca de Tiempo (RFC 3161) no es ampliamente utilizado y el impacto del exploit es solo una denegación de servicio. Por estas razones, el problema fue evaluado como de baja severidad.\n\nLos módulos FIPS en 3.5, 3.4, 3.3 y 3.0 no se ven afectados por este problema, ya que la implementación de la Respuesta de Marca de Tiempo está fuera del límite del módulo FIPS de OpenSSL.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 y 1.1.1 son vulnerables a este problema.\n\nOpenSSL 1.0.2 no se ve afectado por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.1","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.5","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.4","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.19","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1ze","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-28T19:33:06.662569Z","id":"CVE-2025-69420","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-754"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1ze","matchCriteriaId":"E000B986-6A31-468F-9EA3-B9D16DB16FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.19","matchCriteriaId":"C76C5F55-5243-4461-82F5-2FEBFF4D59FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.6","matchCriteriaId":"F5292E9E-6B50-409F-9219-7B0A04047AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.4","matchCriteriaId":"B9D3DCAE-317D-4DFB-93F0-7A235A229619"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.5","matchCriteriaId":"1CAC7CBE-EC03-4089-938A-0CEEB2E09B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.1","matchCriteriaId":"68352537-5E99-4F4D-B78A-BCF0353A70A5"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260127.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2025-69421","sourceIdentifier":"openssl-security@openssl.org","published":"2026-01-27T16:16:34.437","lastModified":"2026-06-17T10:00:40.683","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue."},{"lang":"es","value":"Resumen del problema: Procesar un archivo PKCS#12 malformado puede desencadenar una desreferencia de puntero NULL en la función PKCS12_item_decrypt_d2i_ex().\n\nResumen del impacto: Una desreferencia de puntero NULL puede desencadenar un fallo que lleva a la denegación de servicio para una aplicación que procesa archivos PKCS#12.\n\nLa función PKCS12_item_decrypt_d2i_ex() no comprueba si el parámetro oct es NULL antes de desreferenciarlo. Cuando se llama desde PKCS12_unpack_p7encdata() con un archivo PKCS#12 malformado, este parámetro puede ser NULL, causando un fallo. La vulnerabilidad está limitada a la denegación de servicio y no puede ser escalada para lograr la ejecución de código o la divulgación de memoria.\n\nExplotar este problema requiere que un atacante proporcione un archivo PKCS#12 malformado a una aplicación que lo procesa. Por esa razón, el problema fue evaluado como de baja severidad según nuestra Política de Seguridad.\n\nLos módulos FIPS en 3.6, 3.5, 3.4, 3.3 y 3.0 no se ven afectados por este problema, ya que la implementación de PKCS#12 está fuera del límite del módulo FIPS de OpenSSL.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 y 1.0.2 son vulnerables a este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.1","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.5","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.4","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.19","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1ze","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zn","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-28T15:17:58.059460Z","id":"CVE-2025-69421","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zn","matchCriteriaId":"6A8EC60C-05EC-4886-8C82-63AEF4BDA8D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndIncluding":"1.1.1ze","matchCriteriaId":"A940A7B2-E35C-420E-A0EE-F1089180C133"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.19","matchCriteriaId":"C76C5F55-5243-4461-82F5-2FEBFF4D59FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.6","matchCriteriaId":"F5292E9E-6B50-409F-9219-7B0A04047AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.4","matchCriteriaId":"B9D3DCAE-317D-4DFB-93F0-7A235A229619"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.5","matchCriteriaId":"1CAC7CBE-EC03-4089-938A-0CEEB2E09B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.1","matchCriteriaId":"68352537-5E99-4F4D-B78A-BCF0353A70A5"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260127.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-22795","sourceIdentifier":"openssl-security@openssl.org","published":"2026-01-27T16:16:35.430","lastModified":"2026-06-17T10:20:26.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\n\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\n\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\n\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue."},{"lang":"es","value":"Resumen del problema: Puede producirse una desreferencia de puntero inválido o NULL en una aplicación que procesa un archivo PKCS#12 malformado.\n\nResumen del impacto: Una aplicación que procesa un archivo PKCS#12 malformado puede ser inducida a desreferenciar un puntero inválido o NULL en una lectura de memoria, resultando en una denegación de servicio.\n\nExiste una vulnerabilidad de confusión de tipos en el código de análisis de PKCS#12 donde se accede a un miembro de la unión ASN1_TYPE sin validar primero el tipo, causando una lectura de puntero inválido.\n\nLa ubicación está restringida a un espacio de direcciones de 1 byte, lo que significa que cualquier intento de manipulación de puntero solo puede apuntar a direcciones entre 0x00 y 0xFF. Este rango corresponde a la página cero, que no está mapeada en la mayoría de los sistemas operativos modernos y resultará de forma fiable en un fallo, lo que lleva solo a una denegación de servicio. Para explotar este problema también es preciso que un usuario o aplicación procese un archivo PKCS#12 creado maliciosamente. Es poco común aceptar archivos PKCS#12 no confiables en aplicaciones, ya que generalmente se utilizan para almacenar claves privadas que son confiables por definición. Por estas razones, el problema fue evaluado como de baja severidad.\n\nLos módulos FIPS en 3.5, 3.4, 3.3 y 3.0 no se ven afectados por este problema, ya que la implementación de PKCS12 está fuera del límite del módulo FIPS de OpenSSL.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 y 1.1.1 son vulnerables a este problema.\n\nOpenSSL 1.0.2 no se ve afectado por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.1","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.5","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.4","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.19","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1ze","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-28T20:03:18.604129Z","id":"CVE-2026-22795","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-754"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1ze","matchCriteriaId":"E000B986-6A31-468F-9EA3-B9D16DB16FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.19","matchCriteriaId":"C76C5F55-5243-4461-82F5-2FEBFF4D59FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.6","matchCriteriaId":"F5292E9E-6B50-409F-9219-7B0A04047AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.4","matchCriteriaId":"B9D3DCAE-317D-4DFB-93F0-7A235A229619"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.5","matchCriteriaId":"1CAC7CBE-EC03-4089-938A-0CEEB2E09B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.1","matchCriteriaId":"68352537-5E99-4F4D-B78A-BCF0353A70A5"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260127.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-22796","sourceIdentifier":"openssl-security@openssl.org","published":"2026-01-27T16:16:35.543","lastModified":"2026-06-17T10:20:26.697","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A type confusion vulnerability exists in the signature\nverification of signed PKCS#7 data where an ASN1_TYPE union member is\naccessed without first validating the type, causing an invalid or NULL\npointer dereference when processing malformed PKCS#7 data.\n\nImpact summary: An application performing signature verification of PKCS#7\ndata or calling directly the PKCS7_digest_from_attributes() function can be\ncaused to dereference an invalid or NULL pointer when reading, resulting in\na Denial of Service.\n\nThe function PKCS7_digest_from_attributes() accesses the message digest attribute\nvalue without validating its type. When the type is not V_ASN1_OCTET_STRING,\nthis results in accessing invalid memory through the ASN1_TYPE union, causing\na crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nsigned PKCS#7 to an application that verifies it. The impact of the\nexploit is just a Denial of Service, the PKCS7 API is legacy and applications\nshould be using the CMS API instead. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#7 parsing implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue."},{"lang":"es","value":"Resumen del problema: Existe una vulnerabilidad de confusión de tipos en la verificación de firma de datos PKCS#7 firmados, donde se accede a un miembro de la unión ASN1_TYPE sin validar primero el tipo, causando una desreferencia de puntero inválido o NULL al procesar datos PKCS#7 malformados.\n\nResumen del impacto: Una aplicación que realiza la verificación de firma de datos PKCS#7 o que llama directamente a la función PKCS7_digest_from_attributes() puede ser inducida a desreferenciar un puntero inválido o NULL al leer, resultando en una denegación de servicio.\n\nLa función PKCS7_digest_from_attributes() accede al valor del atributo de resumen del mensaje sin validar su tipo. Cuando el tipo no es V_ASN1_OCTET_STRING, esto resulta en el acceso a memoria inválida a través de la unión ASN1_TYPE, causando un fallo.\n\nExplotar esta vulnerabilidad requiere que un atacante proporcione un PKCS#7 firmado malformado a una aplicación que lo verifica. El impacto del exploit es solo una denegación de servicio, la API PKCS7 es heredada y las aplicaciones deberían usar la API CMS en su lugar. Por estas razones, el problema fue evaluado como de baja severidad.\n\nLos módulos FIPS en 3.5, 3.4, 3.3 y 3.0 no se ven afectados por este problema, ya que la implementación de análisis de PKCS#7 está fuera del límite del módulo FIPS de OpenSSL.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 y 1.0.2 son vulnerables a este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.1","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.5","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.4","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.19","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1ze","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zn","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-27T16:27:50.351586Z","id":"CVE-2026-22796","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-754"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zn","matchCriteriaId":"6A8EC60C-05EC-4886-8C82-63AEF4BDA8D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1ze","matchCriteriaId":"E000B986-6A31-468F-9EA3-B9D16DB16FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.19","matchCriteriaId":"C76C5F55-5243-4461-82F5-2FEBFF4D59FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.6","matchCriteriaId":"F5292E9E-6B50-409F-9219-7B0A04047AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.4","matchCriteriaId":"B9D3DCAE-317D-4DFB-93F0-7A235A229619"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.5","matchCriteriaId":"1CAC7CBE-EC03-4089-938A-0CEEB2E09B62"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.1","matchCriteriaId":"68352537-5E99-4F4D-B78A-BCF0353A70A5"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260127.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-25892","sourceIdentifier":"security-advisories@github.com","published":"2026-02-09T22:16:04.023","lastModified":"2026-06-17T10:25:23.490","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Adminer is open-source database management software. Adminer v5.4.1 and earlier has a version check mechanism where adminer.org sends signed version info via JavaScript postMessage, which the browser then POSTs to ?script=version. This endpoint lacks origin validation and accepts POST data from any source. An attacker can POST version[] parameter which PHP converts to an array. On next page load, openssl_verify() receives this array instead of string and throws TypeError, returning HTTP 500 to all users. Upgrade to Adminer 5.4.2."},{"lang":"es","value":"Adminer es un software de gestión de bases de datos de código abierto. Adminer v5.4.1 y anteriores tiene un mecanismo de verificación de versión donde adminer.org envía información de versión firmada a través de JavaScript postMessage, que el navegador luego envía por POST a ?script=version. Este endpoint carece de validación de origen y acepta datos POST de cualquier fuente. Un atacante puede enviar por POST el parámetro version[] que PHP convierte en un array. En la siguiente carga de página, openssl_verify() recibe este array en lugar de una cadena y lanza TypeError, devolviendo HTTP 500 a todos los usuarios. Actualice a Adminer 5.4.2."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"vrana","product":"adminer","versions":[{"version":">= 4.6.2, < 5.4.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-10T15:39:30.588522Z","id":"CVE-2026-25892","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adminer:adminer:*:*:*:*:*:*:*:*","versionStartIncluding":"4.6.2","versionEndExcluding":"5.4.2","matchCriteriaId":"0A0A483B-178F-44CC-9EB7-C469C1F8C106"}]}]}],"references":[{"url":"https://github.com/vrana/adminer/commit/21d3a3150388677b18647d68aec93b7850e457d3","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/vrana/adminer/releases/tag/v5.4.2","source":"security-advisories@github.com","tags":["Product","Release Notes"]},{"url":"https://github.com/vrana/adminer/security/advisories/GHSA-q4f2-39gr-45jh","source":"security-advisories@github.com","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-1357","sourceIdentifier":"security@wordfence.com","published":"2026-02-11T06:15:51.677","lastModified":"2026-06-17T10:15:39.267","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process combined with a lack of path sanitization when writing uploaded files. When the plugin fails to decrypt a session key using openssl_private_decrypt(), it does not terminate execution and instead passes the boolean false value to the phpseclib library's AES cipher initialization. The library treats this false value as a string of null bytes, allowing an attacker to encrypt a malicious payload using a predictable null-byte key. Additionally, the plugin accepts filenames from the decrypted payload without sanitization, enabling directory traversal to escape the protected backup directory. This makes it possible for unauthenticated attackers to upload arbitrary PHP files to publicly accessible directories and achieve Remote Code Execution via the wpvivid_action=send_to_site parameter."},{"lang":"es","value":"El plugin Migration, Backup, Staging – WPvivid Backup &amp; Migration para WordPress es vulnerable a la carga arbitraria de archivos no autenticada en versiones hasta la 0.9.123 inclusive. Esto se debe a un manejo inadecuado de errores en el proceso de descifrado RSA combinado con una falta de saneamiento de ruta al escribir archivos cargados. Cuando el plugin no logra descifrar una clave de sesión usando openssl_private_decrypt(), no termina la ejecución y en su lugar pasa el valor booleano falso a la inicialización del cifrado AES de la biblioteca phpseclib. La biblioteca trata este valor falso como una cadena de bytes nulos, permitiendo a un atacante cifrar una carga útil maliciosa usando una clave de byte nulo predecible. Además, el plugin acepta nombres de archivo de la carga útil descifrada sin saneamiento, lo que permite el salto de directorio para escapar del directorio de copia de seguridad protegido. Esto hace posible que atacantes no autenticados carguen archivos PHP arbitrarios a directorios de acceso público y logren la ejecución remota de código a través del parámetro wpvivid_action=send_to_site."}],"affected":[{"source":"security@wordfence.com","affectedData":[{"vendor":"wpvividplugins","product":"WPvivid — Backup, Migration & Staging","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"0.9.123","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@wordfence.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-02-11T15:45:37.402512Z","id":"CVE-2026-1357","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@wordfence.com","type":"Secondary","description":[{"lang":"en","value":"CWE-434"}]}],"references":[{"url":"https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/tags/0.9.122/includes/class-wpvivid-crypt.php#L58","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/tags/0.9.122/includes/customclass/class-wpvivid-send-to-site.php#L629","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/tags/0.9.123/includes/class-wpvivid-crypt.php#L58","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/tags/0.9.123/includes/customclass/class-wpvivid-send-to-site.php#L629","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/trunk/includes/class-wpvivid-crypt.php#L58","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/trunk/includes/customclass/class-wpvivid-send-to-site.php#L629","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/changeset/3448386/wpvivid-backuprestore#file1","source":"security@wordfence.com"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/e5af0317-ef46-4744-9752-74ce228b5f37?source=cve","source":"security@wordfence.com"}]}},{"cve":{"id":"CVE-2026-23229","sourceIdentifier":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","published":"2026-02-18T16:22:32.693","lastModified":"2026-06-17T10:21:08.677","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: virtio - Add spinlock protection with virtqueue notification\n\nWhen VM boots with one virtio-crypto PCI device and builtin backend,\nrun openssl benchmark command with multiple processes, such as\n  openssl speed -evp aes-128-cbc -engine afalg  -seconds 10 -multi 32\n\nopenssl processes will hangup and there is error reported like this:\n virtio_crypto virtio0: dataq.0:id 3 is not a head!\n\nIt seems that the data virtqueue need protection when it is handled\nfor virtio done notification. If the spinlock protection is added\nin virtcrypto_done_task(), openssl benchmark with multiple processes\nworks well."},{"lang":"es","value":"Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux: \n\ncrypto: virtio - Añadir protección con spinlock con notificación de virtqueue\n\nCuando una VM arranca con un dispositivo PCI virtio-crypto y un backend integrado,\nejecutar el comando de benchmark de OpenSSL con múltiples procesos, como\n  openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32\n\nlos procesos de OpenSSL se colgarán y se reporta un error como este:\n virtio_crypto virtio0: dataq.0:id 3 is not a head!\n\nParece que el virtqueue de datos necesita protección cuando se maneja\npara la notificación de finalización de virtio. Si se añade la protección con spinlock\nen virtcrypto_done_task(), el benchmark de OpenSSL con múltiples procesos\nfunciona correctamente."}],"affected":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","affectedData":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/crypto/virtio/virtio_crypto_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"0eb69890e86775d178452880ea0d24384c5ccedf","lessThan":"552475d0b6cece73a52c0fa5faa0ce45e99df74b","versionType":"git","status":"affected"},{"version":"75cba72ddb788a5b9c7ed2139fbb84383df029eb","lessThan":"8ee8ccfd60bf17cbdab91069d324b5302f4f3a30","versionType":"git","status":"affected"},{"version":"ae4747dab2eab95a68bb2f6c7e904bff0424e1b1","lessThan":"c9e594194795c86ca753ad6ed64c2762e9309d0d","versionType":"git","status":"affected"},{"version":"c4c54fce9ec54a59a4ca035af13c2823c76684cc","lessThan":"d6f0d586808689963e58fd739bed626ff5013b24","versionType":"git","status":"affected"},{"version":"fed93fb62e05c38152b0fc1dc9609639e63eed76","lessThan":"c0a0ded3bb7fd45f720faa48449a930153257d3a","versionType":"git","status":"affected"},{"version":"fed93fb62e05c38152b0fc1dc9609639e63eed76","lessThan":"e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2","versionType":"git","status":"affected"},{"version":"fed93fb62e05c38152b0fc1dc9609639e63eed76","lessThan":"49c57c6c108931a914ed94e3c0ddb974008260a3","versionType":"git","status":"affected"},{"version":"fed93fb62e05c38152b0fc1dc9609639e63eed76","lessThan":"b505047ffc8057555900d2d3a005d033e6967382","versionType":"git","status":"affected"},{"version":"96be18c8fff9d57e29621386e2fa17268383ea27","versionType":"git","status":"affected"},{"version":"830a4f073f7edd2cc4f30ba95bdc3495d97c2550","versionType":"git","status":"affected"},{"version":"8862c0d2e47ba1733d9687fe0ff4e02d6e391255","versionType":"git","status":"affected"},{"version":"5.10.209","lessThan":"5.10.251","versionType":"semver","status":"affected"},{"version":"5.15.148","lessThan":"5.15.201","versionType":"semver","status":"affected"},{"version":"6.1.75","lessThan":"6.1.164","versionType":"semver","status":"affected"},{"version":"6.6.14","lessThan":"6.6.125","versionType":"semver","status":"affected"},{"version":"4.19.306","lessThan":"4.20","versionType":"semver","status":"affected"},{"version":"5.4.268","lessThan":"5.5","versionType":"semver","status":"affected"},{"version":"6.7.2","lessThan":"6.8","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/crypto/virtio/virtio_crypto_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.8","status":"affected"},{"version":"0","lessThan":"6.8","versionType":"semver","status":"unaffected"},{"version":"5.10.251","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.201","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.164","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.125","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.72","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.11","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"6.19.1","lessThanOrEqual":"6.19.*","versionType":"semver","status":"unaffected"},{"version":"7.0","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19.306","versionEndExcluding":"4.20","matchCriteriaId":"37284183-45F5-4920-9AD1-228BBCEC94A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.268","versionEndExcluding":"5.5","matchCriteriaId":"2E4BEAC0-E873-440D-A75E-55699C2412A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10.209","versionEndExcluding":"5.10.251","matchCriteriaId":"D38366FE-C4CC-4677-BDBA-A6047B5B666B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.15.148","versionEndExcluding":"5.15.201","matchCriteriaId":"A8470B9F-FA9B-4F8F-AC1F-A6D52A42D2ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.75","versionEndExcluding":"6.1.164","matchCriteriaId":"9520DDD6-B47A-47A5-8BA6-631469420E89"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.14","versionEndExcluding":"6.6.125","matchCriteriaId":"6F7CEBA0-0AB1-4362-9BE0-625B2FBB5CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.2","versionEndExcluding":"6.12.72","matchCriteriaId":"031BE183-1B96-47CD-9ED4-17FD22A726ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.13","versionEndExcluding":"6.18.11","matchCriteriaId":"7099A9EC-3D54-4424-BF01-7224EF88C79C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.19","versionEndExcluding":"6.19.1","matchCriteriaId":"EE543C0D-A06B-414F-A403-CB1E088F261E"}]}]}],"references":[{"url":"https://git.kernel.org/stable/c/49c57c6c108931a914ed94e3c0ddb974008260a3","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"]},{"url":"https://git.kernel.org/stable/c/552475d0b6cece73a52c0fa5faa0ce45e99df74b","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"]},{"url":"https://git.kernel.org/stable/c/8ee8ccfd60bf17cbdab91069d324b5302f4f3a30","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"]},{"url":"https://git.kernel.org/stable/c/b505047ffc8057555900d2d3a005d033e6967382","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"]},{"url":"https://git.kernel.org/stable/c/c0a0ded3bb7fd45f720faa48449a930153257d3a","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"]},{"url":"https://git.kernel.org/stable/c/c9e594194795c86ca753ad6ed64c2762e9309d0d","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"]},{"url":"https://git.kernel.org/stable/c/d6f0d586808689963e58fd739bed626ff5013b24","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"]},{"url":"https://git.kernel.org/stable/c/e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-24695","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2026-02-27T01:16:19.180","lastModified":"2026-06-17T10:23:26.050","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An OS command injection \n\n\n\n\nvulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an \nauthenticated attacker to achieve remote code execution on the system by\n injecting malicious input into OpenSSL argument fields within requests \nsent to the utility route, leading to remote code execution."},{"lang":"es","value":"Una vulnerabilidad de inyección de comandos del sistema operativo existe en XWEB Pro versión 1.12.1 y anteriores, lo que permite a un atacante autenticado lograr la ejecución remota de código en el sistema mediante la inyección de entrada maliciosa en campos de argumentos de OpenSSL dentro de solicitudes enviadas a la ruta de utilidad, lo que lleva a la ejecución remota de código."}],"affected":[{"source":"ics-cert@hq.dhs.gov","affectedData":[{"vendor":"Copeland","product":"Copeland XWEB 300D PRO","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.12.1","versionType":"custom","status":"affected"}]},{"vendor":"Copeland","product":"Copeland XWEB 500D PRO","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.12.1","versionType":"custom","status":"affected"}]},{"vendor":"Copeland","product":"Copeland XWEB 500B PRO","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.12.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","baseScore":8.0,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-02T12:45:49.333708Z","id":"CVE-2026-24695","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:copeland:xweb_500b_pro_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12.1","matchCriteriaId":"E13AD164-C82A-4D6C-84C0-83EB8B0A611C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:copeland:xweb_500b_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"1707F67B-6365-4065-812C-7CC596C6CFF1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:copeland:xweb_300d_pro_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12.1","matchCriteriaId":"BF93AA67-7ABF-45C8-8376-7A28F7D65464"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"AEA10B9B-531A-4775-B32D-AC743D696126"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:copeland:xweb_500d_pro_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.12.1","matchCriteriaId":"088F312E-06DF-4B90-A478-A6B5A39DE0F0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*","matchCriteriaId":"A524988E-E22F-4B0F-AEE6-46B3F103989C"}]}]}],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory"]},{"url":"https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate","source":"ics-cert@hq.dhs.gov","tags":["Product"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10","source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2026-2673","sourceIdentifier":"openssl-security@openssl.org","published":"2026-03-13T19:54:34.033","lastModified":"2026-06-17T10:31:30.993","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected\npreferred key exchange group when its key exchange group configuration includes\nthe default by using the 'DEFAULT' keyword.\n\nImpact summary: A less preferred key exchange may be used even when a more\npreferred group is supported by both client and server, if the group\nwas not included among the client's initial predicated keyshares.\nThis will sometimes be the case with the new hybrid post-quantum groups,\nif the client chooses to defer their use until specifically requested by\nthe server.\n\nIf an OpenSSL TLS 1.3 server's configuration uses the 'DEFAULT' keyword to\ninterpolate the built-in default group list into its own configuration, perhaps\nadding or removing specific elements, then an implementation defect causes the\n'DEFAULT' list to lose its 'tuple' structure, and all server-supported groups\nwere treated as a single sufficiently secure 'tuple', with the server not\nsending a Hello Retry Request (HRR) even when a group in a more preferred tuple\nwas mutually supported.\n\nAs a result, the client and server might fail to negotiate a mutually supported\npost-quantum key agreement group, such as 'X25519MLKEM768', if the client's\nconfiguration results in only 'classical' groups (such as 'X25519' being the\nonly ones in the client's initial keyshare prediction).\n\nOpenSSL 3.5 and later support a new syntax for selecting the most preferred TLS\n1.3 key agreement group on TLS servers.  The old syntax had a single 'flat'\nlist of groups, and treated all the supported groups as sufficiently secure.\nIf any of the keyshares predicted by the client were supported by the server\nthe most preferred among these was selected, even if other groups supported by\nthe client, but not included in the list of predicted keyshares would have been\nmore preferred, if included.\n\nThe new syntax partitions the groups into distinct 'tuples' of roughly\nequivalent security.  Within each tuple the most preferred group included among\nthe client's predicted keyshares is chosen, but if the client supports a group\nfrom a more preferred tuple, but did not predict any corresponding keyshares,\nthe server will ask the client to retry the ClientHello (by issuing a Hello\nRetry Request or HRR) with the most preferred mutually supported group.\n\nThe above works as expected when the server's configuration uses the built-in\ndefault group list, or explicitly defines its own list by directly defining the\nvarious desired groups and group 'tuples'.\n\nNo OpenSSL FIPS modules are affected by this issue, the code in question lies\noutside the FIPS boundary.\n\nOpenSSL 3.6 and 3.5 are vulnerable to this issue.\n\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.2 once it is released.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.6 once it is released.\n\nOpenSSL 3.4, 3.3, 3.0, 1.0.2 and 1.1.1 are not affected by this issue."},{"lang":"es","value":"Resumen del problema: Un servidor OpenSSL TLS 1.3 puede fallar al negociar el grupo de intercambio de claves preferido esperado cuando su configuración de grupo de intercambio de claves incluye el predeterminado al usar la palabra clave 'DEFAULT'.\n\nResumen del impacto: Un intercambio de claves menos preferido puede ser usado incluso cuando un grupo más preferido es soportado tanto por el cliente como por el servidor, si el grupo no fue incluido entre los keyshares iniciales predichos del cliente. Este será a veces el caso con los nuevos grupos híbridos post-cuánticos, si el cliente elige aplazar su uso hasta que sea solicitado específicamente por el servidor.\n\nSi la configuración de un servidor OpenSSL TLS 1.3 usa la palabra clave 'DEFAULT' para interpolar la lista de grupos predeterminada incorporada en su propia configuración, quizás añadiendo o eliminando elementos específicos, entonces un defecto de implementación causa que la lista 'DEFAULT' pierda su estructura de 'tupla', y todos los grupos soportados por el servidor fueron tratados como una única 'tupla' suficientemente segura, con el servidor no enviando una Solicitud de Reintento de Hello (HRR) incluso cuando un grupo en una tupla más preferida era mutuamente soportado.\n\nComo resultado, el cliente y el servidor podrían fallar al negociar un grupo de acuerdo de clave post-cuántico mutuamente soportado, como 'X25519MLKEM768', si la configuración del cliente resulta en solo grupos 'clásicos' (como 'X25519' siendo los únicos en la predicción inicial de keyshare del cliente).\n\nOpenSSL 3.5 y posteriores soportan una nueva sintaxis para seleccionar el grupo de acuerdo de clave TLS 1.3 más preferido en servidores TLS. La sintaxis antigua tenía una única lista 'plana' de grupos, y trataba todos los grupos soportados como suficientemente seguros. Si alguno de los keyshares predichos por el cliente era soportado por el servidor, el más preferido entre estos era seleccionado, incluso si otros grupos soportados por el cliente, pero no incluidos en la lista de keyshares predichos, habrían sido más preferidos, si se hubieran incluido.\n\nLa nueva sintaxis particiona los grupos en 'tuplas' distintas de seguridad aproximadamente equivalente. Dentro de cada tupla se elige el grupo más preferido incluido entre los keyshares predichos del cliente, pero si el cliente soporta un grupo de una tupla más preferida, pero no predijo ningún keyshare correspondiente, el servidor pedirá al cliente que reintente el ClientHello (emitiendo una Solicitud de Reintento de Hello o HRR) con el grupo mutuamente soportado más preferido.\n\nLo anterior funciona como se espera cuando la configuración del servidor usa la lista de grupos predeterminada incorporada, o define explícitamente su propia lista definiendo directamente los diversos grupos y 'tuplas' de grupo deseados.\n\nNingún módulo FIPS de OpenSSL está afectado por este problema, el código en cuestión se encuentra fuera del límite FIPS.\n\nOpenSSL 3.6 y 3.5 son vulnerables a este problema.\n\nLos usuarios de OpenSSL 3.6 deberían actualizar a OpenSSL 3.6.2 una vez que sea lanzado.\nLos usuarios de OpenSSL 3.5 deberían actualizar a OpenSSL 3.5.6 una vez que sea lanzado.\n\nOpenSSL 3.4, 3.3, 3.0, 1.0.2 y 1.1.1 no están afectados por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.2","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.6","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC CN 4100","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-17T17:17:17.444679Z","id":"CVE-2026-2673","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-757"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.6","matchCriteriaId":"F6BC0271-444D-4597-BF05-DC60034EAA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.2","matchCriteriaId":"4A9E621D-29D8-418A-BF37-BED333C14507"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:simatic_cn_4100_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"5.0","matchCriteriaId":"AA9D4F6E-9336-4026-B485-4227C861B356"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:simatic_cn_4100:-:*:*:*:*:*:*:*","matchCriteriaId":"92619F5F-3679-4424-9455-3285FF1EF2F1"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/2157c9d81f7b0bd7dfa25b960e928ec28e8dd63f","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260313.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/03/13/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-27448","sourceIdentifier":"security-advisories@github.com","published":"2026-03-18T00:16:19.107","lastModified":"2026-06-17T10:27:10.570","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection."},{"lang":"es","value":"pyOpenSSL es un envoltorio de Python alrededor de la biblioteca OpenSSL. A partir de la versión 0.14.0 y antes de la versión 26.0.0, si un callback proporcionado por el usuario a `set_tlsext_servername_callback` generaba una excepción no controlada, esto daba como resultado que se aceptara una conexión. Si un usuario dependía de este callback para cualquier comportamiento sensible a la seguridad, esto podría permitir eludirlo. A partir de la versión 26.0.0, las excepciones no controladas ahora dan como resultado el rechazo de la conexión."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"pyca","product":"pyopenssl","versions":[{"version":">= 0.14.0, < 26.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":1.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-18T20:17:52.492201Z","id":"CVE-2026-27448","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-636"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pyopenssl:pyopenssl:*:*:*:*:*:*:*:*","versionStartIncluding":"0.14","versionEndExcluding":"26.0.0","matchCriteriaId":"1AE99DC9-6CA8-484B-962C-92A1F7652489"}]}]}],"references":[{"url":"https://github.com/pyca/pyopenssl/blob/358cbf29c4e364c59930e53a270116249581eaa3/CHANGELOG.rst#L27","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/pyca/pyopenssl/commit/d41a814759a9fb49584ca8ab3f7295de49a85aa0","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/pyca/pyopenssl/security/advisories/GHSA-vp96-hxj8-p424","source":"security-advisories@github.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-27459","sourceIdentifier":"security-advisories@github.com","published":"2026-03-18T00:16:19.273","lastModified":"2026-09-10T13:17:59.900","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected."},{"lang":"es","value":"pyOpenSSL es un envoltorio de Python para la biblioteca OpenSSL. A partir de la versión 22.0.0 y antes de la versión 26.0.0, si una devolución de llamada proporcionada por el usuario a set_cookie_generate_callback devolvía un valor de cookie superior a 256 bytes, pyOpenSSL desbordaría un búfer proporcionado por OpenSSL. A partir de la versión 26.0.0, los valores de cookie que son demasiado largos ahora son rechazados."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"pyca","product":"pyopenssl","versions":[{"version":">= 22.0.0, < 26.0.0","status":"affected"}]}]},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","affectedData":[{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.5 for RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python3.12-pyOpenSSL","cpes":["cpe:/a:redhat:ansible_automation_platform:2.5::el8"],"versions":[{"version":"0:26.0.0-1.el8ap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.5 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python3.12-pyOpenSSL","cpes":["cpe:/a:redhat:ansible_automation_platform:2.5::el9"],"versions":[{"version":"0:26.0.0-1.el9ap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.6 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"automation-controller","cpes":["cpe:/a:redhat:ansible_automation_platform:2.6::el9"],"versions":[{"version":"0:4.7.11-2.el9ap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.6 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python3.12-pyOpenSSL","cpes":["cpe:/a:redhat:ansible_automation_platform:2.6::el9"],"versions":[{"version":"0:26.0.0-1.el9ap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python-pyOpenSSL","cpes":["cpe:/a:redhat:satellite:6.16::el8","cpe:/a:redhat:satellite_capsule:6.16::el8"],"versions":[{"version":"0:24.1.0-2.el8pc","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.16 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python-pyOpenSSL","cpes":["cpe:/a:redhat:satellite:6.16::el9","cpe:/a:redhat:satellite_capsule:6.16::el9"],"versions":[{"version":"0:24.1.0-2.el9pc","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.17 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python-pyOpenSSL","cpes":["cpe:/a:redhat:satellite:6.17::el9","cpe:/a:redhat:satellite_capsule:6.17::el9"],"versions":[{"version":"0:25.1.0-0.3.el9pc","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Satellite 6.18 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python3.12-pyOpenSSL","cpes":["cpe:/a:redhat:satellite:6.18::el9","cpe:/a:redhat:satellite_capsule:6.18::el9"],"versions":[{"version":"0:26.0.0-2.el9pc","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"RHUI 4 for RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python-pyOpenSSL","cpes":["cpe:/a:redhat:rhui:4::el8"],"versions":[{"version":"0:24.1.0-2.el8ui","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform-25/ee-supported-rhel8","cpes":["cpe:/a:redhat:ansible_automation_platform:2.5::el8"],"versions":[{"version":"1777398315","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform-25/lightspeed-rhel8","cpes":["cpe:/a:redhat:ansible_automation_platform:2.5::el8"],"versions":[{"version":"1777403872","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.6","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform-26/ansible-dev-tools-rhel9","cpes":["cpe:/a:redhat:ansible_automation_platform:2.6::el9"],"versions":[{"version":"1777390240","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.6","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform-26/eda-controller-rhel9","cpes":["cpe:/a:redhat:ansible_automation_platform:2.6::el9"],"versions":[{"version":"1777296732","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.6","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform-26/ee-supported-rhel9","cpes":["cpe:/a:redhat:ansible_automation_platform:2.6::el9"],"versions":[{"version":"1777391447","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.6","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform-26/hub-rhel9","cpes":["cpe:/a:redhat:ansible_automation_platform:2.6::el9"],"versions":[{"version":"1777299023","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.6","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform-26/lightspeed-rhel9","cpes":["cpe:/a:redhat:ansible_automation_platform:2.6::el9"],"versions":[{"version":"1777387242","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.6","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform-26/platform-resource-runner-rhel9","cpes":["cpe:/a:redhat:ansible_automation_platform:2.6::el9"],"versions":[{"version":"1777390333","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.7","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform-27/ee-supported-rhel9","cpes":["cpe:/a:redhat:ansible_automation_platform:2.7::el9"],"versions":[{"version":"1787235693","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.7","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"ansible-automation-platform-27/lightspeed-rhel9","cpes":["cpe:/a:redhat:ansible_automation_platform:2.7::el9"],"versions":[{"version":"1787217531","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"jaeger-main","cpes":["cpe:/a:redhat:hummingbird:1"],"versions":[{"version":"2.20.0-0.8.hum1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"pyopenssl-main","cpes":["cpe:/a:redhat:hummingbird:1"],"versions":[{"version":"26.0.0-1.1.hum1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Quay 3.10","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"quay/quay-rhel8","cpes":["cpe:/a:redhat:quay:3.10::el8"],"versions":[{"version":"1776736910","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Quay 3.12","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"quay/quay-rhel8","cpes":["cpe:/a:redhat:quay:3.12::el8"],"versions":[{"version":"1776752646","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Quay 3.14","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"quay/quay-rhel8","cpes":["cpe:/a:redhat:quay:3.14::el8"],"versions":[{"version":"1779689392","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Quay 3.15","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"quay/quay-rhel8","cpes":["cpe:/a:redhat:quay:3.15::el8"],"versions":[{"version":"1780891395","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Quay 3.16","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"quay/quay-rhel9","cpes":["cpe:/a:redhat:quay:3.16::el9"],"versions":[{"version":"1779204086","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Quay 3.17","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"quay/quay-rhel9","cpes":["cpe:/a:redhat:quay:3.17::el9"],"versions":[{"version":"1779922205","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Quay 3.18","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"quay/quay-rhel9","cpes":["cpe:/a:redhat:quay:3.18::el9"],"versions":[{"version":"1784987273","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Quay 3.9","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"quay/quay-rhel8","cpes":["cpe:/a:redhat:quay:3.9::el8"],"versions":[{"version":"1776782369","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Trusted Artifact Signer 1.4","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhtas/model-transparency-rhel9","cpes":["cpe:/a:redhat:trusted_artifact_signer:1.4::el9"],"versions":[{"version":"1775815407","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Confidential Compute Attestation","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-sandboxed-containers/osc-podvm-builder-rhel9","cpes":["cpe:/a:redhat:confidential_compute_attestation:1"]},{"vendor":"Red Hat","product":"Exploit Intelligence","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"exploit-intelligence-tech-preview/vulnerability-analysis-rhel9","cpes":["cpe:/a:redhat:exploit_intelligence:0"]},{"vendor":"Red Hat","product":"Lightspeed Core","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"lightspeed-core/lightspeed-stack-rhel9","cpes":["cpe:/a:redhat:lightspeed_core"]},{"vendor":"Red Hat","product":"Lightspeed Core","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"lightspeed-core/rag-tool-cpu-rhel9","cpes":["cpe:/a:redhat:lightspeed_core"]},{"vendor":"Red Hat","product":"Lightspeed Core","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"lightspeed-core/rag-tool-cuda-12.9-rhel9","cpes":["cpe:/a:redhat:lightspeed_core"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-24/controller-rhel8","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-24/eda-controller-rhel8","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-24/ee-minimal-rhel8","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-24/ee-minimal-rhel9","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-24/hub-rhel8","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-25/controller-rhel8","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-25/eda-controller-rhel8","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-25/ee-minimal-rhel8","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-25/ee-minimal-rhel9","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-25/hub-rhel8","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-26/controller-rhel9","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-26/ee-minimal-rhel9","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-27/controller-rhel9","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-27/ee-minimal-rhel9","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python3.11-pyOpenSSL","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python3x-pyOpenSSL","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python-pyOpenSSL","cpes":["cpe:/a:redhat:ansible_automation_platform:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform Ansible Core 2","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform/ee-minimal-rhel8","cpes":["cpe:/a:redhat:ansible_core:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform Ansible Core 2","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform/ee-minimal-rhel9","cpes":["cpe:/a:redhat:ansible_core:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform Ansible Core 2","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-tech-preview/ee-minimal-rhel8","cpes":["cpe:/a:redhat:ansible_core:2"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform Ansible Core 2","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-automation-platform-tech-preview/ee-minimal-rhel9","cpes":["cpe:/a:redhat:ansible_core:2"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhceph/rhceph-7-rhel9","cpes":["cpe:/a:redhat:ceph_storage:7"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhceph/rhceph-8-rhel9","cpes":["cpe:/a:redhat:ceph_storage:8"]},{"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhceph/rhceph-9-rhel9","cpes":["cpe:/a:redhat:ceph_storage:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"pyOpenSSL","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"pyOpenSSL","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"pyOpenSSL","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"mariadb11.8","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python-sentry-sdk","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python-trustme","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python-urllib3","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-feature-server-rhel9","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-llama-stack-core-rhel9","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-mlflow-rhel9","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-model-registry-job-async-upload-rhel9","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/ose-ironic-agent-rhel9","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift4/ose-ironic-rhel9","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"pyOpenSSL","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python-redis","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"pyOpenSSL","cpes":["cpe:/a:redhat:openstack:17.1"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"pyOpenSSL","cpes":["cpe:/a:redhat:openstack:18.0"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoso/openstack-cinder-api-rhel9","cpes":["cpe:/a:redhat:openstack:18.0"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoso/openstack-cinder-backup-rhel9","cpes":["cpe:/a:redhat:openstack:18.0"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoso/openstack-cinder-base-rhel9","cpes":["cpe:/a:redhat:openstack:18.0"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoso/openstack-cinder-scheduler-rhel9","cpes":["cpe:/a:redhat:openstack:18.0"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoso/openstack-cinder-volume-rhel9","cpes":["cpe:/a:redhat:openstack:18.0"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoso/openstack-glance-api-rhel9","cpes":["cpe:/a:redhat:openstack:18.0"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoso/openstack-manila-share-rhel9","cpes":["cpe:/a:redhat:openstack:18.0"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoso/openstack-nova-compute-rhel9","cpes":["cpe:/a:redhat:openstack:18.0"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 18.0","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoso/openstack-openstackclient-rhel9","cpes":["cpe:/a:redhat:openstack:18.0"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python-redis","cpes":["cpe:/a:redhat:satellite:6"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python-urllib3","cpes":["cpe:/a:redhat:satellite:6"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"satellite/iop-advisor-engine-rhel9","cpes":["cpe:/a:redhat:satellite:6"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"satellite/iop-insights-engine-rhel9","cpes":["cpe:/a:redhat:satellite:6"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"satellite/iop-vmaas-rhel9","cpes":["cpe:/a:redhat:satellite:6"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"tfm-pulpcore-python-pyOpenSSL","cpes":["cpe:/a:redhat:satellite:6"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 4 for Cloud Providers","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python-redis","cpes":["cpe:/a:redhat:rhui:4::el8"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 4 for Cloud Providers","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python-urllib3","cpes":["cpe:/a:redhat:rhui:4::el8"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhui5/cds-kubernetes-rhel9","cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhui5/cds-rhel9","cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhui5/rhua-rhel9","cpes":["cpe:/a:redhat:rhui:5::el9"]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-18T19:52:08.536876Z","id":"CVE-2026-27459","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pyopenssl:pyopenssl:*:*:*:*:*:*:*:*","versionStartIncluding":"22.0.0","versionEndExcluding":"26.0.0","matchCriteriaId":"36CBBDFE-83B3-4F32-98E6-49E62AD0BD1B"}]}]}],"references":[{"url":"https://github.com/pyca/pyopenssl/blob/358cbf29c4e364c59930e53a270116249581eaa3/CHANGELOG.rst","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/pyca/pyopenssl/commit/57f09bb4bb051d3bc2a1abd36e9525313d5cd408","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/pyca/pyopenssl/security/advisories/GHSA-5pwr-322w-8jr4","source":"security-advisories@github.com","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:10754","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:11856","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:11916","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:11996","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:13508","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:13512","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:13545","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:13553","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:14835","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:14873","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:14874","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:19375","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:21017","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:22465","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:24853","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:48085","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:48758","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:59153","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:7224","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:8437","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/security/cve/CVE-2026-27459","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448503","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27459.json","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}]}},{"cve":{"id":"CVE-2026-34054","sourceIdentifier":"security-advisories@github.com","published":"2026-03-31T03:15:58.593","lastModified":"2026-06-17T10:38:29.443","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"vcpkg is a free and open-source C/C++ package manager. Prior to version 3.6.1#3, vcpkg's Windows builds of OpenSSL set openssldir to a path on the build machine, making that path be attackable later on customer machines. This issue has been patched in version 3.6.1#3."},{"lang":"es","value":"vcpkg es un gestor de paquetes C/C++ gratuito y de código abierto. Antes de la versión 3.6.1#3, las compilaciones de OpenSSL para Windows de vcpkg configuraban openssldir a una ruta en la máquina de compilación, haciendo que esa ruta fuera atacable posteriormente en las máquinas de los clientes. Este problema ha sido parcheado en la versión 3.6.1#3."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"microsoft","product":"vcpkg","versions":[{"version":"< 3.6.1#3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-01T00:00:00+00:00","id":"CVE-2026-34054","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"references":[{"url":"https://github.com/microsoft/vcpkg/commit/5111afdf55cc1429d9951e4c7b02010e659346a9","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/vcpkg/pull/50518","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/vcpkg/security/advisories/GHSA-p322-v6vw-vrq9","source":"security-advisories@github.com"}]}},{"cve":{"id":"CVE-2026-28386","sourceIdentifier":"openssl-security@openssl.org","published":"2026-04-07T22:16:20.513","lastModified":"2026-07-24T23:10:00.563","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Applications using AES-CFB128 encryption or decryption on\nsystems with AVX-512 and VAES support can trigger an out-of-bounds read\nof up to 15 bytes when processing partial cipher blocks.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not written to output.\n\nThe vulnerable code path is only reached when processing partial blocks\n(when a previous call left an incomplete block and the current call provides\nfewer bytes than needed to complete it). Additionally, the input buffer\nmust be positioned at a page boundary with the following page unmapped.\nCFB mode is not used in TLS/DTLS protocols, which use CBC, GCM, CCM, or\nChaCha20-Poly1305 instead. For these reasons the issue was assessed as\nLow severity according to our Security Policy.\n\nOnly x86-64 systems with AVX-512 and VAES instruction support are affected.\nOther architectures and systems without VAES support use different code\npaths that are not affected.\n\nOpenSSL FIPS module in 3.6 version is affected by this issue."},{"lang":"es","value":"Resumen del problema: Las aplicaciones que usan cifrado o descifrado AES-CFB128 en sistemas con soporte para AVX-512 y VAES pueden desencadenar una lectura fuera de límites de hasta 15 bytes al procesar bloques de cifrado parciales.\n\nResumen del impacto: Esta lectura fuera de límites puede desencadenar un fallo que lleva a la denegación de servicio para una aplicación si el búfer de entrada termina en un límite de página de memoria y la página siguiente no está mapeada. No hay divulgación de información ya que los bytes leídos en exceso no se escriben en la salida.\n\nLa ruta de código vulnerable solo se alcanza al procesar bloques parciales (cuando una llamada anterior dejó un bloque incompleto y la llamada actual proporciona menos bytes de los necesarios para completarlo). Además, el búfer de entrada debe estar posicionado en un límite de página con la página siguiente sin mapear. El modo CFB no se usa en los protocolos TLS/DTLS, que usan CBC, GCM, CCM o ChaCha20-Poly1305 en su lugar. Por estas razones, el problema fue evaluado como de severidad Baja según nuestra Política de Seguridad.\n\nSolo los sistemas x86-64 con soporte para instrucciones AVX-512 y VAES están afectados. Otras arquitecturas y sistemas sin soporte VAES usan rutas de código diferentes que no están afectadas.\n\nEl módulo OpenSSL FIPS en la versión 3.6 está afectado por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-10T20:15:21.235876Z","id":"CVE-2026-28386","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.2","matchCriteriaId":"4A9E621D-29D8-418A-BF37-BED333C14507"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/61f428a2fc6671ede184a19f71e6e495f0689621","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260407.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-28388","sourceIdentifier":"openssl-security@openssl.org","published":"2026-04-07T22:16:20.863","lastModified":"2026-07-24T23:10:00.563","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: Cuando se procesa una CRL delta que contiene una extensión Indicador de CRL Delta, podría ocurrir una desreferencia de puntero NULL si falta la extensión Número de CRL requerida.\n\nResumen del impacto: Una desreferencia de puntero NULL puede desencadenar un fallo que lleva a una denegación de servicio para una aplicación.\n\nCuando el procesamiento de CRL y el procesamiento de CRL delta están habilitados durante la verificación de certificados X.509, el procesamiento de CRL delta no verifica si la extensión Número de CRL es NULL antes de desreferenciarla. Cuando se procesa un archivo CRL delta malformado, este parámetro puede ser NULL, causando una desreferencia de puntero NULL.\n\nExplotar este problema requiere que la bandera X509_V_FLAG_USE_DELTAS esté habilitada en el contexto de verificación, que el certificado que se verifica contenga una extensión freshestCRL o que la CRL base tenga la bandera EXFLAG_FRESHEST establecida, y que un atacante proporcione una CRL malformada a una aplicación que la procese.\n\nLa vulnerabilidad se limita a la denegación de servicio y no puede escalarse para lograr la ejecución de código o la divulgación de memoria. Por esa razón, el problema se evaluó como de baja severidad según nuestra Política de Seguridad.\n\nLos módulos FIPS en 3.6, 3.5, 3.4, 3.3 y 3.0 no se ven afectados por este problema, ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.2","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.6","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.5","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.7","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.20","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1zg","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zp","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC CN 4100","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-10T20:18:04.195701Z","id":"CVE-2026-28388","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zp","matchCriteriaId":"CE7957CC-80F0-4907-BFB5-AFB6994DDE3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1zg","matchCriteriaId":"656A0540-5825-498E-A7AB-C14976FEE45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.20","matchCriteriaId":"B28A8143-89A4-4332-A1F8-A65FB5AA829F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.7","matchCriteriaId":"CF303B21-D9BF-461D-B7B0-A3FE1D557A9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.5","matchCriteriaId":"DCCE43D0-8F17-475D-9EE6-842F758A9905"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.6","matchCriteriaId":"F6BC0271-444D-4597-BF05-DC60034EAA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.2","matchCriteriaId":"4A9E621D-29D8-418A-BF37-BED333C14507"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260407.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-28389","sourceIdentifier":"openssl-security@openssl.org","published":"2026-04-07T22:16:21.030","lastModified":"2026-07-24T23:10:00.563","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: Durante el procesamiento de un mensaje CMS EnvelopedData manipulado con KeyAgreeRecipientInfo puede ocurrir una desreferencia de puntero NULL.\n\nResumen del impacto: Las aplicaciones que procesan datos CMS controlados por el atacante pueden fallar antes de que ocurran operaciones de autenticación o criptográficas, lo que resulta en denegación de servicio.\n\nCuando se procesa un mensaje CMS EnvelopedData que utiliza KeyAgreeRecipientInfo, el campo de parámetros opcionales de KeyEncryptionAlgorithmIdentifier se examina sin verificar su presencia. Esto resulta en una desreferencia de puntero NULL si el campo falta.\n\nLas aplicaciones y servicios que llaman a CMS_decrypt() en entradas no confiables (por ejemplo, procesamiento S/MIME o protocolos basados en CMS) son vulnerables.\n\nLos módulos FIPS en 3.6, 3.5, 3.4, 3.3 y 3.0 no se ven afectados por este problema, ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.2","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.6","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.5","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.7","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.20","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1zg","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zp","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC CN 4100","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-10T20:20:14.953384Z","id":"CVE-2026-28389","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zp","matchCriteriaId":"CE7957CC-80F0-4907-BFB5-AFB6994DDE3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1zg","matchCriteriaId":"656A0540-5825-498E-A7AB-C14976FEE45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.20","matchCriteriaId":"B28A8143-89A4-4332-A1F8-A65FB5AA829F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.7","matchCriteriaId":"CF303B21-D9BF-461D-B7B0-A3FE1D557A9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.5","matchCriteriaId":"DCCE43D0-8F17-475D-9EE6-842F758A9905"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.6","matchCriteriaId":"F6BC0271-444D-4597-BF05-DC60034EAA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.2","matchCriteriaId":"4A9E621D-29D8-418A-BF37-BED333C14507"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260407.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-28390","sourceIdentifier":"openssl-security@openssl.org","published":"2026-04-07T22:16:21.190","lastModified":"2026-07-24T23:10:00.563","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: Durante el procesamiento de un mensaje CMS EnvelopedData manipulado con KeyTransportRecipientInfo, puede ocurrir una desreferencia de puntero NULL.\n\nResumen del impacto: Las aplicaciones que procesan datos CMS controlados por el atacante pueden fallar antes de que ocurran operaciones de autenticación o criptográficas, lo que resulta en denegación de servicio.\n\nCuando se procesa un mensaje CMS EnvelopedData que utiliza KeyTransportRecipientInfo con cifrado RSA-OAEP, el campo de parámetros opcionales del identificador de algoritmo RSA-OAEP SourceFunc se examina sin verificar su presencia. Esto resulta en una desreferencia de puntero NULL si el campo falta.\n\nLas aplicaciones y servicios que llaman a CMS_decrypt() con entrada no confiable (por ejemplo, procesamiento S/MIME o protocolos basados en CMS) son vulnerables.\n\nLos módulos FIPS en 3.6, 3.5, 3.4, 3.3 y 3.0 no se ven afectados por este problema, ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.2","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.6","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.5","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.7","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.20","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1zg","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zp","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC CN 4100","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-10T20:24:15.925981Z","id":"CVE-2026-28390","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zp","matchCriteriaId":"CE7957CC-80F0-4907-BFB5-AFB6994DDE3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1zg","matchCriteriaId":"656A0540-5825-498E-A7AB-C14976FEE45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.20","matchCriteriaId":"B28A8143-89A4-4332-A1F8-A65FB5AA829F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.7","matchCriteriaId":"CF303B21-D9BF-461D-B7B0-A3FE1D557A9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.5","matchCriteriaId":"DCCE43D0-8F17-475D-9EE6-842F758A9905"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.6","matchCriteriaId":"F6BC0271-444D-4597-BF05-DC60034EAA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.2","matchCriteriaId":"4A9E621D-29D8-418A-BF37-BED333C14507"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260407.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-31789","sourceIdentifier":"openssl-security@openssl.org","published":"2026-04-07T22:16:21.617","lastModified":"2026-07-24T23:10:00.563","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: La conversión de un valor OCTET STRING excesivamente grande a una cadena hexadecimal conduce a un desbordamiento de búfer de montón en plataformas de 32 bits.\n\nResumen del impacto: Un desbordamiento de búfer de montón puede conducir a un fallo o posiblemente a una ejecución de código controlada por un atacante u otro comportamiento indefinido.\n\nSi un atacante puede proporcionar un certificado X.509 manipulado con un valor OCTET STRING excesivamente grande en extensiones como el Identificador de Clave de Sujeto (SKID) o el Identificador de Clave de Autoridad (AKID) que se están convirtiendo a hexadecimal, el tamaño del búfer necesario para el resultado se calcula como la multiplicación de la longitud de entrada por 3. En plataformas de 32 bits, esta multiplicación puede desbordarse, lo que resulta en la asignación de un búfer más pequeño y un desbordamiento de búfer de montón.\n\nLas aplicaciones y servicios que imprimen o registran contenidos de certificados X.509 no confiables son vulnerables a este problema. Dado que los certificados tendrían que tener tamaños de más de 1 Gigabyte, imprimir o registrar dichos certificados es una operación bastante improbable y solo las plataformas de 32 bits se ven afectadas, a este problema se le asignó una severidad Baja.\n\nLos módulos FIPS en 3.6, 3.5, 3.4, 3.3 y 3.0 no se ven afectados por este problema, ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"3.6.0","lessThan":"3.6.2","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.6","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.5","versionType":"semver","status":"affected"},{"version":"3.3.0","lessThan":"3.3.7","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.20","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC CN 4100","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V5.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":4.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-09T03:56:05.246752Z","id":"CVE-2026-31789","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.20","matchCriteriaId":"B28A8143-89A4-4332-A1F8-A65FB5AA829F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3.0","versionEndExcluding":"3.3.7","matchCriteriaId":"CF303B21-D9BF-461D-B7B0-A3FE1D557A9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.5","matchCriteriaId":"DCCE43D0-8F17-475D-9EE6-842F758A9905"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.6","matchCriteriaId":"F6BC0271-444D-4597-BF05-DC60034EAA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.2","matchCriteriaId":"4A9E621D-29D8-418A-BF37-BED333C14507"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260407.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-5501","sourceIdentifier":"facts@wolfssl.com","published":"2026-04-10T04:17:17.230","lastModified":"2026-06-17T10:59:07.810","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"wolfSSL_X509_verify_cert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untrusted intermediate with Basic Constraints `CA:FALSE` that is legitimately signed by a trusted root. An attacker who obtains any leaf certificate from a trusted CA (e.g. a free DV cert from Let's Encrypt) can forge a certificate for any subject name with any public key and arbitrary signature bytes, and the function returns `WOLFSSL_SUCCESS` / `X509_V_OK`. The native wolfSSL TLS handshake path (`ProcessPeerCerts`) is not susceptible and the issue is limited to applications using the OpenSSL compatibility API directly, which would include integrations of wolfSSL into nginx and haproxy."}],"affected":[{"source":"facts@wolfssl.com","affectedData":[{"vendor":"wolfSSL","product":"wolfSSL","defaultStatus":"unaffected","modules":["wolfSSL_X509_verify_cert"],"programFiles":["src/x509_str.c"],"versions":[{"version":"0","lessThanOrEqual":"5.9.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"facts@wolfssl.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.6,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-22T03:55:48.544190Z","id":"CVE-2026-5501","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"facts@wolfssl.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.0","matchCriteriaId":"DA5C710C-46E8-470C-83AF-D33D1A40512D"}]}]}],"references":[{"url":"https://github.com/wolfSSL/wolfssl/pull/10102","source":"facts@wolfssl.com","tags":["Issue Tracking"]}]}},{"cve":{"id":"CVE-2026-4158","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2026-04-11T01:16:17.620","lastModified":"2026-06-17T10:56:04.927","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the configuration of OpenSSL. The product loads configuration from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of KeePassXC when run by a target user on the system. Was ZDI-CAN-29156."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"KeePassXC","product":"KeePassXC","defaultStatus":"unknown","versions":[{"version":"2.7.11","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.3,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-13T17:39:53.737910Z","id":"CVE-2026-4158","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"references":[{"url":"https://github.com/keepassxreboot/keepassxc/security/advisories/GHSA-4gr2-cr97-q9fx","source":"zdi-disclosures@trendmicro.com"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-215/","source":"zdi-disclosures@trendmicro.com"}]}},{"cve":{"id":"CVE-2026-6482","sourceIdentifier":"cve@rapid7.com","published":"2026-04-17T06:16:30.593","lastModified":"2026-10-26T21:10:00.170","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The Rapid7 Insight Agent (versions > 4.1.0.2) is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level control of a Windows host. Upon startup the agent service attempts to load an OpenSSL configuration file from a non-existent directory that is writable by standard users. By planting a crafted openssl.cnf file an attacker can trick the high-privilege service into executing arbitrary commands. This effectively permits an unprivileged user to bypass security controls and achieve a full host compromise under the agent’s SYSTEM level access."},{"lang":"es","value":"El Agente Rapid7 Insight (versiones mayor que 4.1.0.2) es vulnerable a un ataque de escalada de privilegios local que permite a los usuarios obtener control a nivel de SYSTEM de un host Windows. Al iniciar, el servicio del agente intenta cargar un archivo de configuración de OpenSSL desde un directorio inexistente que es escribible por usuarios estándar. Al colocar un archivo openssl.cnf manipulado, un atacante puede engañar al servicio de altos privilegios para que ejecute comandos arbitrarios. Esto permite efectivamente a un usuario sin privilegios eludir los controles de seguridad y lograr un compromiso completo del host bajo el acceso a nivel de SYSTEM del agente."}],"affected":[{"source":"cve@rapid7.com","affectedData":[{"vendor":"Rapid7","product":"Insight Agent","defaultStatus":"unaffected","platforms":["Windows"],"versions":[{"version":"0","lessThan":"4.1.0.2","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"cve@rapid7.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.5,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"LOW","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-17T00:00:00+00:00","id":"CVE-2026-6482","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@rapid7.com","type":"Secondary","description":[{"lang":"en","value":"CWE-829"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rapid7:insight_agent:*:*:*:*:*:*:*:*","versionEndExcluding":"4.1.0.2","matchCriteriaId":"AB08C3C5-FAC4-4999-A869-E5F3992DA2C5"}]}]}],"references":[{"url":"https://docs.rapid7.com/insight/release-notes-2026-april/#improvements-and-fixes","source":"cve@rapid7.com","tags":["Release Notes"]}]}},{"cve":{"id":"CVE-2026-41676","sourceIdentifier":"security-advisories@github.com","published":"2026-04-24T18:16:29.120","lastModified":"2026-07-15T16:17:18.250","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"rust-openssl provides OpenSSL bindings for the Rust programming language.  From 0.9.27 to before 0.10.78, Deriver::derive (and PkeyCtxRef::derive) sets len = buf.len() and passes it as the in/out length to EVP_PKEY_derive, relying on OpenSSL to honor it. On OpenSSL 1.1.x, X25519, X448, DH and HKDF-extract ignore the incoming *keylen, unconditionally writing the full shared secret (32/56/prime-size bytes). A caller passing a short slice gets a heap/stack overflow from safe code. OpenSSL 3.x providers do check, so this only impacts older OpenSSL. This vulnerability is fixed in 0.10.78."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"rust-openssl","product":"rust-openssl","versions":[{"version":">= 0.9.27, < 0.10.78","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-24T17:43:14.622885Z","id":"CVE-2026-41676","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-131"},{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rust-openssl_project:rust-openssl:*:*:*:*:*:rust:*:*","versionStartIncluding":"0.9.27","versionEndExcluding":"0.10.78","matchCriteriaId":"24CB7C43-B5C0-45BE-83E3-18C5E4B09F8C"}]}]}],"references":[{"url":"https://github.com/rust-openssl/rust-openssl/security/advisories/GHSA-pqf5-4pqq-29f5","source":"security-advisories@github.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-41677","sourceIdentifier":"security-advisories@github.com","published":"2026-04-24T18:16:29.270","lastModified":"2026-06-17T10:46:59.230","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"rust-openssl provides OpenSSL bindings for the Rust programming language.  From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the user's callback. A password callback that returns a value larger than the buffer it was given can cause some versions of OpenSSL to over-read this buffer. OpenSSL 3.x is not affected by this. This vulnerability is fixed in 0.10.78."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"rust-openssl","product":"rust-openssl","versions":[{"version":">= 0.9.0, < 0.10.78","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":1.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-24T18:02:18.350112Z","id":"CVE-2026-41677","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-125"},{"lang":"en","value":"CWE-1284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rust-openssl_project:rust-openssl:*:*:*:*:*:rust:*:*","versionStartIncluding":"0.9.0","versionEndExcluding":"0.10.78","matchCriteriaId":"719EF572-C4F5-4870-BB7E-3808612C7112"}]}]}],"references":[{"url":"https://github.com/rust-openssl/rust-openssl/security/advisories/GHSA-xmgf-hq76-4vx2","source":"security-advisories@github.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-41678","sourceIdentifier":"security-advisories@github.com","published":"2026-04-24T18:16:29.420","lastModified":"2026-07-17T19:24:37.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"rust-openssl provides OpenSSL bindings for the Rust programming language.  From  to before 0.10.78, aes::unwrap_key() contains an incorrect assertion: it checks that out.len() + 8 <= in_.len(), but this condition is reversed. The intended invariant is out.len() >= in_.len() - 8, ensuring the output buffer is large enough. Because of the inverted check, the function only accepts buffers at or below the minimum required size and rejects larger ones. If a smaller buffer is provided the function will write past the end of out by in_.len() - 8 - out.len() bytes, causing an out-of-bounds write from a safe public function. This vulnerability is fixed in 0.10.78."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"rust-openssl","product":"rust-openssl","versions":[{"version":">= 0.10.24, < 0.10.78","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-24T18:27:46.176271Z","id":"CVE-2026-41678","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rust-openssl_project:rust-openssl:*:*:*:*:*:rust:*:*","versionStartIncluding":"0.10.24","versionEndExcluding":"0.10.78","matchCriteriaId":"0A17A0AA-DE7E-478E-B869-163E3D5B690F"}]}]}],"references":[{"url":"https://github.com/rust-openssl/rust-openssl/security/advisories/GHSA-8c75-8mhr-p7r9","source":"security-advisories@github.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-41681","sourceIdentifier":"security-advisories@github.com","published":"2026-04-24T18:16:29.717","lastModified":"2026-07-15T16:51:48.920","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"rust-openssl provides OpenSSL bindings for the Rust programming language.  From 0.10.39 to before 0.10.78, EVP_DigestFinal() always writes EVP_MD_CTX_size(ctx) to the out buffer. If out is smaller than that, MdCtxRef::digest_final() writes past its end, usually corrupting the stack. This is reachable from safe Rust. This vulnerability is fixed in 0.10.78."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"rust-openssl","product":"rust-openssl","versions":[{"version":">= 0.10.39, < 0.10.78","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-24T17:42:49.447277Z","id":"CVE-2026-41681","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rust-openssl_project:rust-openssl:*:*:*:*:*:rust:*:*","versionStartIncluding":"0.10.39","versionEndExcluding":"0.10.78","matchCriteriaId":"6027F7A1-EB1E-42B3-834F-7F0B93742F16"}]}]}],"references":[{"url":"https://github.com/rust-openssl/rust-openssl/commit/826c3888b77add418b394770e2b2e3a72d9f92fe","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/rust-openssl/rust-openssl/pull/2608","source":"security-advisories@github.com","tags":["Issue Tracking"]},{"url":"https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/rust-openssl/rust-openssl/security/advisories/GHSA-ghm9-cr32-g9qj","source":"security-advisories@github.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-41898","sourceIdentifier":"security-advisories@github.com","published":"2026-04-24T18:16:29.860","lastModified":"2026-07-15T16:17:15.797","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"rust-openssl provides OpenSSL bindings for the Rust programming language.  From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set_psk_server_callback, set_cookie_generate_cb, and set_stateless_cookie_generate_cb forwarded the user closure's returned usize directly to OpenSSL without checking it against the &mut [u8] that was handed to the closure. This can lead to buffer overflows and other unintended consequences. This vulnerability is fixed in 0.10.78."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"rust-openssl","product":"rust-openssl","versions":[{"version":">= 0.9.24, < 0.10.78","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-04-24T18:01:38.714785Z","id":"CVE-2026-41898","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-126"},{"lang":"en","value":"CWE-130"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rust-openssl_project:rust-openssl:*:*:*:*:*:rust:*:*","versionStartIncluding":"0.9.24","versionEndExcluding":"0.10.78","matchCriteriaId":"48B33EB8-16FE-4AD9-BB49-7000B56BC885"}]}]}],"references":[{"url":"https://github.com/rust-openssl/rust-openssl/commit/1d109020d98fff2fb2e45c39a373af3dff99b24c","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/rust-openssl/rust-openssl/pull/2607","source":"security-advisories@github.com","tags":["Issue Tracking"]},{"url":"https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.78","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/rust-openssl/rust-openssl/security/advisories/GHSA-hppc-g8h3-xhp3","source":"security-advisories@github.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-37554","sourceIdentifier":"cve@mitre.org","published":"2026-05-01T16:16:31.060","lastModified":"2026-06-17T10:41:35.443","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a denial of service. The vulnerability exists in the GeoNetworking packet processing pipeline where OpenSSL exceptions from ECC point validation (invalid compressed point, point not on curve) are not properly caught by the Router::indicate() call chain. The openssl_wrapper.cpp check() function (line 19) throws openssl::Exception when OpenSSL operations fail. The parser's catch block in parse_secured() should catch these, but the exception escapes through subsequent processing stages (indicate_common, indicate_extended). This causes std::terminate, crashing the V2X receiver."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-01T19:37:12.099921Z","id":"CVE-2026-37554","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-248"}]}],"references":[{"url":"https://gist.github.com/sgInnora/45128ae15d52df7238680a8f2da8359f","source":"cve@mitre.org"},{"url":"https://github.com/riebl/vanetza","source":"cve@mitre.org"},{"url":"https://github.com/riebl/vanetza/blob/master/vanetza/geonet/router.cpp","source":"cve@mitre.org"},{"url":"https://github.com/riebl/vanetza/blob/master/vanetza/security/openssl_wrapper.cpp","source":"cve@mitre.org"},{"url":"https://github.com/riebl/vanetza/security/advisories/GHSA-44qj-vh8c-5354","source":"cve@mitre.org"}]}},{"cve":{"id":"CVE-2026-40004","sourceIdentifier":"psirt@zte.com.cn","published":"2026-05-07T04:16:23.073","lastModified":"2026-10-26T19:10:00.163","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges."},{"lang":"es","value":"Existe una vulnerabilidad de escalada de privilegios de openssl.cnf en el cliente ZTE Cloud PC uSmartview. Un atacante puede ejecutar código arbitrario localmente y escalar privilegios."}],"affected":[{"source":"psirt@zte.com.cn","affectedData":[{"vendor":"ZTE","product":"ZXCLOUD iRAI","defaultStatus":"unaffected","versions":[{"version":"ZXCLOUD-iRAI-ClientV7.2X","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@zte.com.cn","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.3,"impactScore":4.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-07T12:40:43.739644Z","id":"CVE-2026-40004","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@zte.com.cn","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zte:zxcloud_irai:*:*:*:*:*:*:*:*","versionStartIncluding":"7.23.20","versionEndExcluding":"7.25.43","matchCriteriaId":"C6E53081-879B-41EE-AAEA-1D5EC10B8721"}]}]}],"references":[{"url":"https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3126272076755775573","source":"psirt@zte.com.cn","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2025-62628","sourceIdentifier":"psirt@amd.com","published":"2026-05-14T15:16:44.207","lastModified":"2026-10-14T13:10:00.187","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution."},{"lang":"es","value":"La inicialización insegura de OpenSSL dentro de algunas herramientas opcionales de AMD podría permitir a un atacante local con privilegios de usuario inyectar una DLL maliciosa, lo que podría resultar en ejecución de código arbitrario."}],"affected":[{"source":"psirt@amd.com","affectedData":[{"vendor":"AMD","product":"AIM-T Manageability Service","defaultStatus":"affected","versions":[{"version":"AIM-T Manageability Service 5.1.0.1382","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Cloud Manageability Service (ACMS)","defaultStatus":"affected","versions":[{"version":"AMD Cloud Manageability Service (ACMS) 2.0.0.295","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Management Plug-In for SCCM","defaultStatus":"affected","versions":[{"version":"AMD Management Plug-In for SCCM 8.0.0.1411","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Management Console (AMC)","defaultStatus":"affected","versions":[{"version":"AMD Management Console (AMC) 12.0.0.1378","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Manageability API","defaultStatus":"affected","versions":[{"version":"AMD Manageability API 8.0.0.346","status":"unaffected"}]},{"vendor":"AMD","product":"DASH CLI - Command Line Application","defaultStatus":"affected","versions":[{"version":"DASH CLI - Command Line Application 8.0.0.318","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"psirt@amd.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"PASSIVE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-14T00:00:00+00:00","id":"CVE-2025-62628","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@amd.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9024.html","source":"psirt@amd.com"}]}},{"cve":{"id":"CVE-2026-44312","sourceIdentifier":"security-advisories@github.com","published":"2026-05-14T17:16:22.393","lastModified":"2026-10-26T14:10:00.130","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"css_parser is a Ruby CSS parser. Prior to 2.1.0 and 1.22.0, the CSS Parser gem does not validate HTTPS connections, allowing a Man-in-the-Middle (MITM) attacker to inject or modify CSS content when stylesheets are loaded via HTTPS. The connection is established with OpenSSL::SSL::VERIFY_NONE, meaning any HTTPS certificate—even entirely untrusted—will be accepted without validation. This vulnerability is fixed in 2.1.0 and 1.22.0."},{"lang":"es","value":"css_parser es un analizador CSS de Ruby. Antes de las versiones 2.1.0 y 1.22.0, la gema CSS Parser no valida las conexiones HTTPS, permitiendo a un atacante man-in-the-middle (MitM) inyectar o modificar contenido CSS cuando las hojas de estilo se cargan a través de HTTPS. La conexión se establece con OpenSSL::SSL::VERIFY_NONE, lo que significa que cualquier certificado HTTPS -incluso los completamente no confiables- será aceptado sin validación. Esta vulnerabilidad está corregida en las versiones 2.1.0 y 1.22.0."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"premailer","product":"css_parser","versions":[{"version":">= 2.0.0, < 2.1.0","status":"affected"},{"version":"< 1.22.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-15T18:05:24.647346Z","id":"CVE-2026-44312","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"},{"lang":"en","value":"CWE-829"}]}],"references":[{"url":"https://github.com/premailer/css_parser/commit/35e689c904225add78e0c488cf04bad052666449","source":"security-advisories@github.com"},{"url":"https://github.com/premailer/css_parser/commit/e0c95d5abe91b237becb90ff316531a6547ada18","source":"security-advisories@github.com"},{"url":"https://github.com/premailer/css_parser/issues/185","source":"security-advisories@github.com"},{"url":"https://github.com/premailer/css_parser/security/advisories/GHSA-ff6c-w6qf-7xqc","source":"security-advisories@github.com"},{"url":"https://github.com/premailer/css_parser/security/advisories/GHSA-ff6c-w6qf-7xqc","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2026-42327","sourceIdentifier":"security-advisories@github.com","published":"2026-05-14T21:16:45.430","lastModified":"2026-06-17T10:47:41.687","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocsp_responders returns OCSP responder URLs from a certificate's AIA extension as OpensslString, whose Deref<Target = str> wraps the raw bytes with str::from_utf8_unchecked. OpenSSL does not enforce that the underlying IA5String is ASCII, so a certificate with non-UTF-8 bytes in its OCSP accessLocation causes safe Rust code to construct a &str that violates the UTF-8 invariant — resulting in undefined behavior. This vulnerability is fixed in 0.10.79."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"rust-openssl","product":"rust-openssl","versions":[{"version":">= 0.9.7, < 0.10.79","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-15T16:28:41.920658Z","id":"CVE-2026-42327","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]}],"references":[{"url":"https://github.com/rust-openssl/rust-openssl/security/advisories/GHSA-xp3w-r5p5-63rr","source":"security-advisories@github.com"}]}},{"cve":{"id":"CVE-2026-44662","sourceIdentifier":"security-advisories@github.com","published":"2026-05-14T21:16:47.237","lastModified":"2026-06-17T10:51:12.570","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.0 to before 0.10.79, CipherCtxRef::cipher_update, CipherCtxRef::cipher_update_vec, and symm::Crypter::update incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers (EVP_aes_{128,192,256}_wrap_pad). For a non-multiple-of-8 input, OpenSSL writes up to 7 bytes past the end of the caller's buffer or Vec, producing attacker-controllable heap corruption when the plaintext length is attacker-influenced. This only impacts users using AES key-wrap-with-padding ciphers. This vulnerability is fixed in 0.10.79."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"rust-openssl","product":"rust-openssl","versions":[{"version":">= 0.10.0, < 0.10.79","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-16T01:01:24.891867Z","id":"CVE-2026-44662","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"references":[{"url":"https://github.com/rust-openssl/rust-openssl/security/advisories/GHSA-xv59-967r-8726","source":"security-advisories@github.com"}]}},{"cve":{"id":"CVE-2026-7373","sourceIdentifier":"cve@rapid7.com","published":"2026-05-15T03:16:23.270","lastModified":"2026-10-26T14:10:00.130","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a user to gain SYSTEM level control of a Windows host. When started the metasploitPostgreSQL service would start the postgres.exe child process which would in turn load an OpenSSL configuration file from a static location. This static location would be writable by a pre-existing \"vagrant\" user, if they already existed on the system. Metasploit does not create local accounts, an Administrator would need to create it. By planting a crafted openssl.cnf file an attacker can trick the high-privilege service into executing arbitrary commands. This effectively permits the unprivileged vagrant user to bypass security controls and achieve a full host compromise under the agent's SYSTEM level access."},{"lang":"es","value":"Rapid7 Metasploit Pro es vulnerable a un ataque de escalada de privilegios local que permite a los usuarios obtener control a nivel de SYSTEM de un host de Windows. Al iniciar el servicio metasploitPostgreSQL, el servicio postgres.exe subsiguiente intenta cargar un archivo de configuración de OpenSSL desde un directorio inexistente que es escribible por usuarios estándar. Al colocar un archivo openssl.cnf manipulado, un atacante puede engañar al servicio de altos privilegios para que ejecute comandos arbitrarios. Esto permite efectivamente a un usuario sin privilegios eludir los controles de seguridad y lograr un compromiso completo del host bajo el acceso a nivel de SYSTEM del agente."}],"affected":[{"source":"cve@rapid7.com","affectedData":[{"vendor":"Rapid7","product":"Metasploit Pro","defaultStatus":"unaffected","platforms":["Windows"],"versions":[{"version":"5.0.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"cve@rapid7.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.5,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-15T13:24:25.685495Z","id":"CVE-2026-7373","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@rapid7.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"},{"lang":"en","value":"CWE-427"},{"lang":"en","value":"CWE-829"}]}],"references":[{"url":"https://docs.rapid7.com/insight/release-notes-5.0.0-2026051301/#:~:text=Pro%3A%20We%20fixed,vulnerability%20to%20Rapid7.","source":"cve@rapid7.com"}]}},{"cve":{"id":"CVE-2026-44699","sourceIdentifier":"security-advisories@github.com","published":"2026-05-15T17:16:47.783","lastModified":"2026-10-26T14:10:00.130","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parameter as the verification key for an HS256/HS384/HS512 token. In the OpenSSL backend, this causes HMAC verification to run with a zero-length key, so an attacker can forge a valid JWT without knowing any secret or RSA private key. This is an algorithm-confusion authentication bypass. It affects applications that load RSA keys from JWKS where alg is omitted, which is valid JWK syntax and common in real deployments, and then choose the verification algorithm from the JWT header, for example in a kid lookup callback. This vulnerability is fixed in 3.3.3."},{"lang":"es","value":"LibJWT es una biblioteca C de JSON Web Token. Desde la versión 3.0.0 hasta la 3.3.2, libjwt acepta una JWK RSA que no contiene un parámetro ’alg’ como clave de verificación para un token HS256/HS384/HS512. En el backend de OpenSSL, esto provoca que la verificación HMAC se ejecute con una clave de longitud cero, por lo que un atacante puede falsificar un JWT válido sin conocer ningún secreto o clave privada RSA. Esto es una omisión de autenticación por confusión de algoritmo. Afecta a las aplicaciones que cargan claves RSA de JWKS donde se omite ’alg’, lo cual es una sintaxis JWK válida y común en implementaciones reales, y luego eligen el algoritmo de verificación del encabezado JWT, por ejemplo, en una devolución de llamada de búsqueda de ’kid’. Esta vulnerabilidad está corregida en la versión 3.3.3."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"benmcollins","product":"libjwt","versions":[{"version":">= 3.0.0, < 3.3.3","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-15T18:00:54.375359Z","id":"CVE-2026-44699","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-327"},{"lang":"en","value":"CWE-347"}]}],"references":[{"url":"https://github.com/benmcollins/libjwt/security/advisories/GHSA-q843-6q5f-w55g","source":"security-advisories@github.com"},{"url":"https://github.com/benmcollins/libjwt/security/advisories/GHSA-q843-6q5f-w55g","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2026-8721","sourceIdentifier":"9b29abf9-4ab0-4765-b253-1875cd9b441e","published":"2026-05-17T19:16:25.310","lastModified":"2026-10-25T23:10:00.167","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs.\n\nPassword parameters in PKCS12.xs are declared char *, which routes through Perl's default typemap to SvPV_nolen.  The Perl length is discarded.\n\nThe C code (or OpenSSL internally) calls strlen() on the buffer.  Any password byte at or after the first NULL is silently dropped. Binary / KDF-derived / HMAC-derived passwords lose entropy without any warnings."},{"lang":"es","value":"Las versiones de Crypt::OpenSSL::PKCS12 hasta la 1.94 para Perl truncan contraseñas con NULLs incrustados.\n\nLos parámetros de contraseña en PKCS12.xs se declaran como char *, lo que se enruta a través del typemap predeterminado de Perl a SvPV_nolen. La longitud de Perl se descarta.\n\nEl código C (o OpenSSL internamente) llama a strlen() en el búfer. Cualquier byte de contraseña en o después del primer NULL se descarta silenciosamente. Las contraseñas binarias / derivadas de KDF / derivadas de HMAC pierden entropía sin ninguna advertencia."}],"affected":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","affectedData":[{"vendor":"JONASBN","product":"Crypt::OpenSSL::PKCS12","defaultStatus":"unaffected","collectionURL":"https://cpan.org/modules","packageName":"Crypt-OpenSSL-PKCS12","programFiles":["PKCS12.xs"],"programRoutines":[{"name":"Crypt::OpenSSL::PKCS12::mac_ok"},{"name":"Crypt::OpenSSL::PKCS12::changepass"},{"name":"Crypt::OpenSSL::PKCS12::create"},{"name":"Crypt::OpenSSL::PKCS12::create_as_string"},{"name":"Crypt::OpenSSL::PKCS12::certificate"},{"name":"Crypt::OpenSSL::PKCS12::ca_certificate"},{"name":"Crypt::OpenSSL::PKCS12::private_key"},{"name":"Crypt::OpenSSL::PKCS12::info_as_hash"},{"name":"Crypt::OpenSSL::PKCS12::info"}],"repo":"https://github.com/dsully/perl-crypt-openssl-pkcs12","versions":[{"version":"0","lessThanOrEqual":"1.94","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-18T12:56:25.907387Z","id":"CVE-2026-8721","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","type":"Secondary","description":[{"lang":"en","value":"CWE-170"}]}],"references":[{"url":"https://metacpan.org/release/JONASBN/Crypt-OpenSSL-PKCS12-1.95/view/Changes.md","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"url":"http://www.openwall.com/lists/oss-security/2026/05/17/6","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2025-14575","sourceIdentifier":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","published":"2026-05-19T14:16:27.120","lastModified":"2026-10-14T13:10:00.187","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory."},{"lang":"es","value":"Una vulnerabilidad de Elemento de Ruta de Búsqueda No Controlada en el backend TLS de OpenSSL de Qt Network (qtbase) en Qt Qt Framework (Unix) permite a un atacante local cargar un certificado de CA malicioso como una autoridad de sistema de confianza a través de un archivo de certificado manipulado colocado en el directorio de trabajo de la aplicación."}],"affected":[{"source":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","affectedData":[{"vendor":"Qt","product":"Qt","defaultStatus":"unaffected","collectionURL":"https://www.qt.io/","packageName":"qtbase","modules":["QSslCertificate","QTlsBackendOpenSSL"],"platforms":["Linux","Unix"],"repo":"https://code.qt.io/cgit/qt/qtbase.git","versions":[{"version":"5.0.0","lessThanOrEqual":"5.15.19","versionType":"python","status":"affected"},{"version":"6.0.0","lessThanOrEqual":"6.5.9","versionType":"python","status":"affected"},{"version":"6.6.0","lessThanOrEqual":"6.8.3","versionType":"python","status":"affected"},{"version":"6.9.0","lessThanOrEqual":"6.9.1","versionType":"python","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":1.8,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"HIGH","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-19T14:10:44.802040Z","id":"CVE-2025-14575","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"references":[{"url":"https://codereview.qt-project.org/c/qt/qtbase/+/642967","source":"a59d8014-47c4-4630-ab43-e1b13cbe58e3"}]}},{"cve":{"id":"CVE-2026-32253","sourceIdentifier":"security-advisories@github.com","published":"2026-05-22T17:16:46.393","lastModified":"2026-07-23T16:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Sunshine is a self-hosted game stream host for Moonlight. In versions prior to 2026.516.143833, the client-certificate authentication can be bypassed because of how OpenSSL verification results are handled. In src/crypto.cpp, the custom verify callback treats X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY, X509_V_ERR_CERT_NOT_YET_VALID, and X509_V_ERR_CERT_HAS_EXPIRED as success. This can allow an untrusted certificate to pass authentication and access protected HTTPS endpoints. This issue has been fixed in version 2026.516.143833."},{"lang":"es","value":"Sunshine es un anfitrión de transmisión de juegos autoalojado para Moonlight. En versiones anteriores a 2026.516.143833, la autenticación de certificado de cliente puede ser eludida debido a cómo se manejan los resultados de verificación de OpenSSL. En src/crypto.cpp, la función de devolución de llamada de verificación personalizada trata X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY, X509_V_ERR_CERT_NOT_YET_VALID y X509_V_ERR_CERT_HAS_EXPIRED como éxito. Esto puede permitir que un certificado no confiable pase la autenticación y acceda a puntos finales HTTPS protegidos. Este problema ha sido solucionado en la versión 2026.516.143833."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"LizardByte","product":"Sunshine","versions":[{"version":"< 2026.516.143833","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-26T13:08:15.350117Z","id":"CVE-2026-32253","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lizardbyte:sunshine:*:*:*:*:*:*:*:*","versionEndExcluding":"2026.516.143833","matchCriteriaId":"21895D5F-6CFA-4693-AB10-89FB1059EF49"}]}]}],"references":[{"url":"https://github.com/LizardByte/Sunshine/releases/tag/v2026.516.143833","source":"security-advisories@github.com","tags":["Product","Release Notes"]},{"url":"https://github.com/LizardByte/Sunshine/security/advisories/GHSA-ph75-mgxh-mv57","source":"security-advisories@github.com","tags":["Exploit","Vendor Advisory"]},{"url":"https://github.com/LizardByte/Sunshine/security/advisories/GHSA-ph75-mgxh-mv57","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-48697","sourceIdentifier":"cve@mitre.org","published":"2026-05-26T17:16:53.920","lastModified":"2026-07-24T11:10:00.170","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections. The execute_web_request_secure() function in src/fast_library.cpp creates a boost::asio::ssl::context with tls_client mode and calls set_default_verify_paths() to load CA certificates, but never calls set_verify_mode(boost::asio::ssl::verify_peer). Without this call, OpenSSL performs the TLS handshake without validating the server's certificate chain, making all HTTPS connections vulnerable to man-in-the-middle attacks. This function is used for telemetry reporting to community-stats.fastnetmon.com, which sends system information including CPU model, kernel version, traffic statistics, and software configuration. An attacker can intercept and modify this data or redirect it to a malicious server."},{"lang":"es","value":"FastNetMon Community Edition hasta la 1.2.9 no verifica los certificados TLS en conexiones HTTPS salientes. La función execute_web_request_secure() en src/fast_library.cpp crea un boost::asio::ssl::context con modo tls_client y llama a set_default_verify_paths() para cargar certificados CA, pero nunca llama a set_verify_mode(boost::asio::ssl::verify_peer). Sin esta llamada, OpenSSL realiza el handshake TLS sin validar la cadena de certificados del servidor, haciendo que todas las conexiones HTTPS sean vulnerables a ataques de man-in-the-middle. Esta función se utiliza para informes de telemetría a community-stats.fastnetmon.com, que envía información del sistema incluyendo modelo de CPU, versión del kernel, estadísticas de tráfico y configuración de software. Un atacante puede interceptar y modificar estos datos o redirigirlos a un servidor malicioso."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-26T20:29:32.321553Z","id":"CVE-2026-48697","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pavel-odintsov:fastnetmon:*:*:*:*:community:*:*:*","versionEndIncluding":"1.2.9","matchCriteriaId":"E712A01F-3AD7-4CC2-9A8B-F8C63756EBBF"}]}]}],"references":[{"url":"https://github.com/pavel-odintsov/fastnetmon","source":"cve@mitre.org","tags":["Product"]},{"url":"https://github.com/pavel-odintsov/fastnetmon/blob/master/src/fast_library.cpp","source":"cve@mitre.org","tags":["Product"]},{"url":"https://lorikeetsecurity.com/blog/fastnetmon-cve-2026-48697-missing-tls-validation","source":"cve@mitre.org","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2023-52945","sourceIdentifier":"security@synology.com","published":"2026-05-27T09:16:24.777","lastModified":"2026-09-26T23:10:00.127","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de elemento de ruta de búsqueda no controlada en el componente DLL de OpenSSL en Synology BeeDrive para escritorio anterior a 1.3.2-13814 permite a los usuarios locales ejecutar código arbitrario a través de vectores no especificados."}],"affected":[{"source":"security@synology.com","affectedData":[{"vendor":"Synology","product":"BeeDrive for desktop","defaultStatus":"affected","versions":[{"version":"*","lessThan":"1.3.2-13814","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@synology.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-27T13:41:15.077250Z","id":"CVE-2023-52945","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@synology.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:synology:beedrive:*:*:*:*:desktop:-:*:*","versionEndExcluding":"1.3.2-13814","matchCriteriaId":"7500DE23-D32F-4A40-B83A-896536740759"}]}]}],"references":[{"url":"https://www.synology.com/en-global/security/advisory/Synology_SA_24_26","source":"security@synology.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2022-4991","sourceIdentifier":"cret@cert.org","published":"2026-06-01T17:16:23.143","lastModified":"2026-07-22T07:10:00.107","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Tychon includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory that may be controllable by an unprivileged user on Windows. Tychon contains a privileged service that uses this OpenSSL component. A user who can place a specially-crafted openssl.cnf file at an appropriate path may be able to achieve arbitrary code execution with SYSTEM privileges."},{"lang":"es","value":"Tychon incluye un componente OpenSSL que especifica una variable OPENSSLDIR como un subdirectorio que puede ser controlable por un usuario sin privilegios en Windows. Tychon contiene un servicio privilegiado que utiliza este componente OpenSSL. Un usuario que pueda colocar un archivo openssl.cnf especialmente diseñado en una ruta adecuada podría lograr la ejecución de código arbitrario con privilegios de SYSTEM."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"Tychon","product":"Tychon","versions":[{"version":"*","lessThan":"1.7.857.82","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-02T15:46:50.993076Z","id":"CVE-2022-4991","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"references":[{"url":"https://www.kb.cert.org/vuls/id/730007","source":"cret@cert.org"}]}},{"cve":{"id":"CVE-2022-49036","sourceIdentifier":"security@synology.com","published":"2026-06-03T14:16:24.997","lastModified":"2026-07-22T19:10:00.120","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users to execute arbitrary code via unspecified vectors."},{"lang":"es","value":"Una vulnerabilidad de inclusión de funcionalidad de una esfera de control no confiable en la configuración de OpenSSL en Synology Active Backup for Business Recovery Media Creator anterior a 2.5.0-2081 permite a usuarios locales ejecutar código arbitrario a través de vectores no especificados."}],"affected":[{"source":"security@synology.com","affectedData":[{"vendor":"Synology","product":"Synology Active Backup for Business Recovery Media Creator","defaultStatus":"affected","versions":[{"version":"*","lessThan":"2.5.0-2081","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@synology.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-03T15:50:00.955014Z","id":"CVE-2022-49036","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@synology.com","type":"Secondary","description":[{"lang":"en","value":"CWE-829"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:synology:active_backup_for_business_recovery_media_creator:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.0-2081","matchCriteriaId":"EFB709F2-6F18-4067-92EC-14B163025AEA"}]}]}],"references":[{"url":"https://www.synology.com/en-global/releaseNote/ActiveBackupRecoveryMediaCreator","source":"security@synology.com","tags":["Release Notes"]}]}},{"cve":{"id":"CVE-2026-41859","sourceIdentifier":"security@vmware.com","published":"2026-06-04T03:16:19.947","lastModified":"2026-07-22T20:10:00.127","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or UAA client secret) and can tamper with the VM list that is written into the NATS authorization file. Stolen credentials grant administrative director access. UsersSync#bosh_api_response_body builds a Net::HTTP client with verify_mode = OpenSSL::SSL::VERIFY_NONE for every director call (/info, /deployments, /deployments/<name>/vms).\n\nAffected versions:\n- BOSH: all versions prior to v282.1.9 (inclusive); fixed in v282.1.9 or later"},{"lang":"es","value":"Un man-in-the-middle de red entre nats-sync y el director de BOSH puede robar las credenciales del director (encabezado de autenticación básica o secreto de cliente UAA) y puede manipular la lista de VM que se escribe en el archivo de autorización de NATS. Las credenciales robadas otorgan acceso administrativo al director. UsersSync#bosh_api_response_body construye un cliente Net::HTTP con verify_mode = OpenSSL::SSL::VERIFY_NONE para cada llamada al director (/info, /deployments, /deployments/<name>/vms).\n\nVersiones afectadas:\n- BOSH: todas las versiones anteriores a la v282.1.9 (inclusive); corregido en la v282.1.9 o posterior"}],"affected":[{"source":"security@vmware.com","affectedData":[{"vendor":"Cloud Foundry Foundation","product":"BOSH","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"282.1.9","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security@vmware.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"security@vmware.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-04T12:38:29.282496Z","id":"CVE-2026-41859","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@vmware.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"references":[{"url":"https://www.cloudfoundry.org/blog/cve-2026-41859-missing-tls-in-nats-sync/","source":"security@vmware.com"}]}},{"cve":{"id":"CVE-2026-41860","sourceIdentifier":"security@vmware.com","published":"2026-06-04T03:16:20.107","lastModified":"2026-07-22T20:10:00.127","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM. HttpRequestHelper#create_async_endpoint and #send_http_get_request_synchronous hard-code OpenSSL::SSL::VERIFY_NONE, enabling an attacker to intercept traffic between bosh-monitor and the BOSH director or UAA and steal credentials.\n\nAffected versions:\n- BOSH: all versions prior to v282.1.9 (inclusive); fixed in v282.1.9 or later"},{"lang":"es","value":"CWE-326 en BOSH permite a un atacante local robar credenciales Basic-auth o redirigir solicitudes de tokens UAA a través de MitM. HttpRequestHelper#create_async_endpoint y #send_http_get_request_synchronous codifican de forma rígida OpenSSL::SSL::VERIFY_NONE, lo que permite a un atacante interceptar el tráfico entre bosh-monitor y el director de BOSH o UAA y robar credenciales.\n\nVersiones afectadas:\n- BOSH: todas las versiones anteriores a la v282.1.9 (inclusive); corregido en la v282.1.9 o posterior"}],"affected":[{"source":"security@vmware.com","affectedData":[{"vendor":"Cloud Foundry Foundation","product":"BOSH","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"282.1.9","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security@vmware.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"security@vmware.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.0,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-04T12:46:17.219639Z","id":"CVE-2026-41860","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@vmware.com","type":"Secondary","description":[{"lang":"en","value":"CWE-326"}]}],"references":[{"url":"https://www.cloudfoundry.org/blog/cve-2026-41860-missing-tls-verify-on-bosh-monitor/","source":"security@vmware.com"}]}},{"cve":{"id":"CVE-2026-34180","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:04.600","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive\nelement whose content exceeds 2 gigabytes in length may cause a heap buffer\nover-read on 64-bit Unix and Unix-like platforms.\n\nImpact summary: The heap buffer over-read may crash the application (Denial of\nService) or to load into the decoded ASN.1 object contents of memory beyond the\nend of the input buffer.  More typically such ASN.1 elements would instead be\ntruncated.\n\nAn integer truncation in OpenSSL's ASN.1 decoder causes the content length of\nan ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the\nworst case the truncated length is treated as a request to scan the binary\ncontent for a terminating zero byte, possibly causing OpenSSL to read either\nless than or beyond the end of the allocated buffer.\n\nApplications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or\nany other d2i_* decoding function are affected. OpenSSL's own command-line\ntools are not vulnerable, as data read through the BIO layer is checked before\nit reaches the affected code. The issue only affects 64-bit Unix and Unix-like\nplatforms; 32-bit platforms and 64-bit Windows are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: Analizar una estructura ASN.1 codificada en DER manipulada con un elemento primitivo cuyo contenido excede los 2 gigabytes de longitud puede causar una lectura excesiva del búfer de la pila (heap buffer over-read) en plataformas Unix y similares a Unix de 64 bits.\n\nResumen del impacto: La lectura excesiva del búfer de la pila puede bloquear la aplicación (Denegación de Servicio) o cargar en el objeto ASN.1 decodificado contenidos de memoria más allá del final del búfer de entrada. Más típicamente, tales elementos ASN.1 serían truncados en su lugar.\n\nUn truncamiento de entero en el decodificador ASN.1 de OpenSSL hace que la longitud del contenido de un elemento primitivo ASN.1 sea manejada incorrectamente cuando excede los 2 gigabytes. En el peor de los casos, la longitud truncada se trata como una solicitud para escanear el contenido binario en busca de un byte cero de terminación, posiblemente causando que OpenSSL lea menos o más allá del final del búfer asignado.\n\nLas aplicaciones que pasan datos suministrados por el atacante a d2i_X509(), d2i_PKCS7(), o cualquier otra función de decodificación d2i_* se ven afectadas. Las propias herramientas de línea de comandos de OpenSSL no son vulnerables, ya que los datos leídos a través de la capa BIO se verifican antes de que lleguen al código afectado. El problema solo afecta a plataformas Unix y similares a Unix de 64 bits; las plataformas de 32 bits y Windows de 64 bits no se ven afectadas.\n\nLos módulos FIPS en 4.0, 3.6, 3.5, 3.4 y 3.0 no se ven afectados por este problema, ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.7","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.21","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1zh","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zq","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T19:00:59.503895Z","id":"CVE-2026-34180","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zq","matchCriteriaId":"F534B804-67B6-49DA-8A86-0FF21E512908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1zh","matchCriteriaId":"43EFE1E3-4049-4EE6-A2AE-BDBA38E6870F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.21","matchCriteriaId":"EDB88756-EDFE-4886-A267-3F19342A6042"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.6","matchCriteriaId":"BF7E21E7-AEC0-4882-B1F1-2D056B506F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.7","matchCriteriaId":"6B6B9930-C549-4D88-9784-AF32CCDDB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/1c6908e4fa5fa568752221d8eaf561a809751e5d","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/cbe418ae978539cf14a398a207dba834c0e93e83","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/d93853c42110d6319e3df07842b488cb9f7ac5ff","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/da5d62af75f69d6fbf7803743d7c56ac75461e43","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/f696c73c3e61b8c502d040af62e690c060908a16","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-34181","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:04.740","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue Summary: The PKCS#12 file processing fails to perform sufficient input\nvalidation for files that use Password-Based Message Authentication Code 1\n(PBMAC1) integrity mechanism allowing a certificate and private key forgery.\n\nImpact Summary: An attacker impersonating a user can cause a service reading\nPKCS#12 files to accept forged certificates and private keys with a 1 in 256\nprobability.\n\nIf a service accepting PKCS#12 files is using passwords for authenticating\nthe received files, the attacker can create unencrypted PKCS#12 files that\nuse PBMAC1 authentication that specifies an HMAC key of only one byte, allowing\nthem to craft a file that will be accepted with a 1 in 256 probability.\nThat would then cause the service to accept a certificate and private key\ncontrolled by the attacker.\n\nThe FIPS modules are not affected by this issue, as the affected code is\noutside the OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: El procesamiento de archivos PKCS#12 no realiza una validación de entrada suficiente para archivos que utilizan el mecanismo de integridad Password-Based Message Authentication Code 1 (PBMAC1), lo que permite la falsificación de un certificado y una clave privada.\n\nResumen del impacto: Un atacante suplantando a un usuario puede hacer que un servicio que lee archivos PKCS#12 acepte certificados y claves privadas falsificados con una probabilidad de 1 entre 256.\n\nSi un servicio que acepta archivos PKCS#12 está utilizando contraseñas para la autenticación de los archivos recibidos, el atacante puede crear archivos PKCS#12 sin cifrar que utilizan autenticación PBMAC1 que especifica una clave HMAC de solo un byte, permitiéndoles crear un archivo que será aceptado con una probabilidad de 1 entre 256. Eso entonces haría que el servicio acepte un certificado y una clave privada controlados por el atacante.\n\nLos módulos FIPS no se ven afectados por este problema, ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.7","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-10T16:01:11.685759Z","id":"CVE-2026-34181","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-354"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.6","matchCriteriaId":"BF7E21E7-AEC0-4882-B1F1-2D056B506F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.7","matchCriteriaId":"6B6B9930-C549-4D88-9784-AF32CCDDB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/0300eb9ddce7a0895bf301a4b0c03a9da2313a0f","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/79eb76a937e474bb7610a0a3dc57131dc8dc6610","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/85dcbb3abaa4878af5c8fbbe11bce708fcf984a7","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/ec36f2417c4ddd8cabce4b4a60a3d7a7365f2d81","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-34182","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:04.857","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue Summary: Cryptographic Message Services (CMS) processing fails to perform\nsufficient input validation on the cipher and tag length fields of\nAuthEnvelopedData containers, leading to various potential compromises.\n\nImpact Summary: Attackers making use of these vulnerabilities may achieve\nkey-equivalent functionality for a given CMS recipient and/or bypass integrity\nvalidation for a given message.\n\nIn one use case, an attacker may send a CMS message containing\nAuthEnvelopedData with the cipher specified as a non-AEAD cipher.  OpenSSL\nerroneously allows this selection, and attempts to decrypt and validate the\nmessage.\n\nAn on-path attacker who captures one legitimate AES-GCM AuthEnvelopedData\naddressed to the victim can re-emit it with the recipientInfos set left\nbyte-for-byte intact, so the victim's private key still unwraps the genuine CEK\n(the content-encryption key), but with the inner OID rewritten to AES-256-OFB\n(Output Feedback Mode, an unauthenticated keystream mode) and with an\nattacker-chosen IV and ciphertext. The victim initializes AES-256-OFB under the\nreal CEK, never consults the MAC field, and CMS_decrypt() returns success.\n\nIf the application under attack responds to the attacker with any indicator\nshowing success or failure of the decryption effort, it is possible for the\nattacker to use this as an oracle to obtain key equivalent functionality for the\nCEK used for the chosen recipient of the message.\n\nIn another use case, an attacker can reduce the tag length of the chosen AEAD\ncipher for a given AuthEnvelopedData container to be a single byte long,\nallowing an attacker to brute force CMS decryption, producing an integrity\nbypass for applications that trust CMS_decrypt() to reject modified content.\n\nThe FIPS modules are not affected by this issue."},{"lang":"es","value":"Resumen del problema: El procesamiento de los Servicios de Mensajes Criptográficos (CMS) no realiza una validación de entrada suficiente en los campos de cifrado y longitud de etiqueta de los contenedores AuthEnvelopedData, lo que lleva a varias posibles compromisos.\n\nResumen del impacto: Los atacantes que aprovechan estas vulnerabilidades pueden lograr una funcionalidad equivalente a la clave para un destinatario CMS dado y/o eludir la validación de integridad para un mensaje dado.\n\nEn un caso de uso, un atacante puede enviar un mensaje CMS que contiene AuthEnvelopedData con el cifrado especificado como un cifrado no AEAD. OpenSSL permite erróneamente esta selección e intenta descifrar y validar el mensaje.\n\nUn atacante en la ruta que captura un AuthEnvelopedData AES-GCM legítimo dirigido a la víctima puede reemitirlo con el conjunto recipientInfos intacto byte a byte, de modo que la clave privada de la víctima aún desenvuelve la CEK genuina (la clave de cifrado de contenido), pero con el OID interno reescrito a AES-256-OFB (Modo de Retroalimentación de Salida, un modo de flujo de clave no autenticado) y con un IV y texto cifrado elegidos por el atacante. La víctima inicializa AES-256-OFB bajo la CEK real, nunca consulta el campo MAC, y CMS_decrypt() devuelve éxito.\n\nSi la aplicación bajo ataque responde al atacante con cualquier indicador que muestre el éxito o fracaso del esfuerzo de descifrado, es posible que el atacante use esto como un oráculo para obtener una funcionalidad equivalente a la clave para la CEK utilizada para el destinatario elegido del mensaje.\n\nEn otro caso de uso, un atacante puede reducir la longitud de la etiqueta del cifrado AEAD elegido para un contenedor AuthEnvelopedData dado a una longitud de un solo byte, permitiendo a un atacante forzar por fuerza bruta el descifrado CMS, produciendo una elusión de integridad para aplicaciones que confían en que CMS_decrypt() rechace el contenido modificado.\n\nLos módulos FIPS no se ven afectados por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.7","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.21","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-10T15:58:17.905043Z","id":"CVE-2026-34182","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-354"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.21","matchCriteriaId":"EDB88756-EDFE-4886-A267-3F19342A6042"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.6","matchCriteriaId":"BF7E21E7-AEC0-4882-B1F1-2D056B506F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.7","matchCriteriaId":"6B6B9930-C549-4D88-9784-AF32CCDDB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/03c1f4d45fb963aee7d5833390c507cd290182bc","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/439ed7d2c0962ce964482727264668bf277c333f","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7947e6a81eb8776802f159fb6762cb7fcf7e34c7","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/9fd97f8cfdc2c0be214998de3b2b55c8edf6c7ac","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/d2ca86bcd43e4f17d899f347101766b6107676e0","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-34183","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:05.000","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Remote peer may exhaust heap memory of the QUIC\nserver or client by flooding it with packets containing PATH_CHALLENGE\nframes.\n\nImpact summary: A malicious remote peer can cause an unbounded\nmemory allocation which can lead to an abnormal termination of the\napplication acting as a QUIC client or server and a Denial of Service.\n\nA remote peer may exhaust heap memory by flooding the local\nQUIC stack with PATH_CHALLENGE frames. The local QUIC stack\nallocates a PATH_RESPONSE frame for every PATH_CHALLENGE it receives.\nThe allocated PATH_RESPONSE frame gets freed only when the remote\npeer acknowledges reception of the PATH_RESPONSE frame which will\nnot be done by a malicious peer.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by\nthis issue. The QUIC stack is outside of OpenSSL FIPS module\nboundary."},{"lang":"es","value":"Resumen del problema: Un par remoto puede agotar la memoria del montón del servidor o cliente QUIC inundándolo con paquetes que contienen tramas PATH_CHALLENGE.\n\nResumen del impacto: Un par remoto malicioso puede causar una asignación de memoria ilimitada que puede llevar a una terminación anormal de la aplicación que actúa como cliente o servidor QUIC y a una denegación de servicio.\n\nUn par remoto puede agotar la memoria del montón inundando la pila QUIC local con tramas PATH_CHALLENGE. La pila QUIC local asigna una trama PATH_RESPONSE por cada PATH_CHALLENGE que recibe. La trama PATH_RESPONSE asignada se libera solo cuando el par remoto acusa recibo de la trama PATH_RESPONSE, lo cual no será hecho por un par malicioso.\n\nLos módulos FIPS en 4.0, 3.6, 3.5, 3.4 y 3.0 no se ven afectados por este problema. La pila QUIC está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.7","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-10T15:50:50.340971Z","id":"CVE-2026-34183","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-1325"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.6","matchCriteriaId":"BF7E21E7-AEC0-4882-B1F1-2D056B506F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.7","matchCriteriaId":"6B6B9930-C549-4D88-9784-AF32CCDDB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/5b306efb0b3779dfdd0803b4afc9d08c91f11517","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7d06955ebe0ecf8adfd4c1e92018586da47ef9ac","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/d2e9efbe4900a373227deb136e8665401404ffac","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/fbaa83859c01ad64f497b757aaf51be7d05ed9eb","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-35188","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:05.437","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A malicious server can exploit TLS OCSP stapling by delivering\na crafted response through the status_request extension, triggering a\ndouble-free in the client's certificate verification path.\n\nImpact summary: Successful exploitation allows an attacker to corrupt heap\nmemory via a double-free, potentially leading to a Denial of Service or\npossibly an attacker controlled code execution or other undefined behavior.\n\nIf OCSP stapling is enabled and the TLS client connects to a malicious server,\na crafted OCSP stapled response can trigger a double free in the TLS client\nwhen the stapled response is checked.\n\nThe OCSP stapling is not enabled by default. Reliable code execution\nthrough a double-free is technically complex and highly environment-dependent\nbut the Denial of Service impact is straightforward to achieve, warranting\nModerate severity.\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: Un servidor malicioso puede explotar el 'TLS OCSP stapling' entregando una respuesta manipulada a través de la 'extension status_request', desencadenando un 'double-free' en la ruta de verificación de certificados del cliente.\n\nResumen del impacto: La explotación exitosa permite a un atacante corromper la memoria 'heap' a través de un 'double-free', lo que podría llevar a una denegación de servicio o posiblemente a una ejecución de código controlada por el atacante u otro comportamiento indefinido.\n\nSi el 'OCSP stapling' está habilitado y el cliente TLS se conecta a un servidor malicioso, una respuesta 'OCSP stapled' manipulada puede desencadenar un 'double free' en el cliente TLS cuando se verifica la respuesta 'stapled'.\n\nEl 'OCSP stapling' no está habilitado por defecto. La ejecución de código fiable a través de un 'double-free' es técnicamente compleja y altamente dependiente del entorno, pero el impacto de denegación de servicio es sencillo de lograr, lo que justifica una severidad Moderada.\n\nNingún módulo FIPS se ve afectado por este problema, ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.6,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-10T03:59:37.106557Z","id":"CVE-2026-35188","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/131145d25659e8749a9ed1afb383484854cffb78","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/78d0154cffda03aaaac63a087cc523a6b35fa8fd","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-42764","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:07.693","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Receiving a QUIC initial packet with an invalid token may\ntrigger a NULL pointer dereference in the OpenSSL QUIC server with\naddress validation disabled.\n\nImpact summary: NULL pointer dereference typically causes abnormal termination\nof the affected QUIC server process and a Denial of Service.\n\nIf the address validation is disabled in the OpenSSL QUIC server\nimplementation, an attacker can crash the server by sending an initial\npacket with an invalid or expired token.\n\nBy default, the client address validation is enabled in the OpenSSL QUIC server\nimplementation, which makes the default configuration not vulnerable\nto this issue. However if the SSL_LISTENER_FLAG_NO_VALIDATE is used with\nthe SSL_new_listener() call, the address validation is disabled making the\nvulnerable code reachable.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: Recibir un paquete inicial QUIC con un token inválido puede desencadenar una desreferencia de puntero NULL en el servidor QUIC de OpenSSL con la validación de direcciones deshabilitada.\n\nResumen del impacto: La desreferencia de puntero NULL típicamente causa la terminación anormal del proceso del servidor QUIC afectado y una denegación de servicio.\n\nSi la validación de direcciones está deshabilitada en la implementación del servidor QUIC de OpenSSL, un atacante puede bloquear el servidor enviando un paquete inicial con un token inválido o caducado.\n\nPor defecto, la validación de direcciones del cliente está habilitada en la implementación del servidor QUIC de OpenSSL, lo que hace que la configuración predeterminada no sea vulnerable a este problema. Sin embargo, si se utiliza SSL_LISTENER_FLAG_NO_VALIDATE con la llamada a SSL_new_listener(), la validación de direcciones se deshabilita, haciendo que el código vulnerable sea accesible.\n\nLos módulos FIPS en 4.0, 3.6, 3.5, 3.4 y 3.0 no se ven afectados por este problema, ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T19:36:40.693568Z","id":"CVE-2026-42764","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.7","matchCriteriaId":"6B6B9930-C549-4D88-9784-AF32CCDDB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/5e3ed291b8af0b03d5d3b9e56a1da69a187e9729","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a45a0aba8095682c88ff4fc4a784892b8c6f0677","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/bf29a458c1a231eca87e384c62b9c2553fa57a91","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-42765","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:07.843","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: When a partial-chain certificate verification is enabled\ntogether with OCSP response checking for the whole chain, a NULL dereference\nwill happen if the verified chain does not have a self-signed trusted anchor,\ncrashing the process.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to a\nDenial of Service for an application.\n\nWhen performing OCSP response checking for certificates in the verification\nchain, the code always tries to access the next certificate as the issuer.\nThere is a check for a self-signed certificate. However with the partial\nchain verification enabled when the chain does not have a self-signed trusted\nanchor, the issuer will be NULL for the last certificate in the chain. A NULL\npointer dereference then happens.\n\nThis issue affects only applications which enable both OCSP verification\nof the certificate chain (X509_V_FLAG_OCSP_RESP_CHECK_ALL) and partial\nchain verification (X509_V_FLAG_PARTIAL_CHAIN) in the certificate\nverification. Both flags are disabled by default. For that reason, we have\nassigned Low severity to the issue.\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: Cuando la verificación de certificado de cadena parcial está habilitada junto con la comprobación de respuesta OCSP para toda la cadena, ocurrirá una desreferencia de NULL si la cadena verificada no tiene un ancla de confianza autofirmada, bloqueando el proceso.\n\nResumen del impacto: Una desreferencia de puntero NULL puede desencadenar un bloqueo que lleva a una Denegación de Servicio para una aplicación.\n\nAl realizar la comprobación de respuesta OCSP para certificados en la cadena de verificación, el código siempre intenta acceder al siguiente certificado como emisor. Hay una comprobación para un certificado autofirmado. Sin embargo, con la verificación de cadena parcial habilitada, cuando la cadena no tiene un ancla de confianza autofirmada, el emisor será NULL para el último certificado de la cadena. Entonces ocurre una desreferencia de puntero NULL.\n\nEste problema afecta solo a las aplicaciones que habilitan tanto la verificación OCSP de la cadena de certificados (X509_V_FLAG_OCSP_RESP_CHECK_ALL) como la verificación de cadena parcial (X509_V_FLAG_PARTIAL_CHAIN) en la verificación de certificados. Ambas banderas están deshabilitadas por defecto. Por esa razón, hemos asignado una severidad Baja al problema.\n\nNingún módulo FIPS se ve afectado por este problema ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T19:35:48.849695Z","id":"CVE-2026-42765","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/14340b7fa1d444615486bc137014b064e64ec334","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/eb345da18ce2216b2f3ade9c2bc23e068487fa97","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-42766","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:07.970","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A specially crafted password-encrypted CMS message\ncan trigger a NULL pointer dereference during CMS decryption.\n\nImpact summary: This NULL pointer dereference leads to an application crash\nand a Denial of Service.\n\nThe CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as\nOPTIONAL in the ASN.1 specification and may therefore be absent in specially\ncrafted inputs. During the password-based CMS decryption the OpenSSL\nCMS implementation dereferences this field without first checking whether it\nwas present.\n\nAn attacker who supplies such a CMS message to an application performing\npassword-based CMS decryption can trigger an application crash, leading to\na Denial of Service.\n\nApplications that process password-encrypted CMS messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: Un mensaje CMS cifrado con contraseña especialmente diseñado puede desencadenar una desreferencia de puntero NULL durante el descifrado CMS.\n\nResumen del impacto: Esta desreferencia de puntero NULL conduce a un fallo de la aplicación y a una denegación de servicio.\n\nEl campo CMS PasswordRecipientInfo.keyDerivationAlgorithm se define como OPCIONAL en la especificación ASN.1 y, por lo tanto, puede estar ausente en entradas especialmente diseñadas. Durante el descifrado CMS basado en contraseña, la implementación CMS de OpenSSL desreferencia este campo sin comprobar primero si estaba presente.\n\nUn atacante que suministra un mensaje CMS de este tipo a una aplicación que realiza el descifrado CMS basado en contraseña puede desencadenar un fallo de la aplicación, lo que lleva a una denegación de servicio.\n\nLas aplicaciones que procesan mensajes CMS cifrados con contraseña pueden verse afectadas.\n\nLos módulos FIPS en 4.0, 3.6, 3.5, 3.4 y 3.0 no se ven afectados por este problema, ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.7","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.21","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1zh","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zq","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T19:46:24.673332Z","id":"CVE-2026-42766","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zq","matchCriteriaId":"F534B804-67B6-49DA-8A86-0FF21E512908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1zh","matchCriteriaId":"43EFE1E3-4049-4EE6-A2AE-BDBA38E6870F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.21","matchCriteriaId":"EDB88756-EDFE-4886-A267-3F19342A6042"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.6","matchCriteriaId":"BF7E21E7-AEC0-4882-B1F1-2D056B506F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.7","matchCriteriaId":"6B6B9930-C549-4D88-9784-AF32CCDDB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/056d06c1918fafbb98c1c85a02e4c47cc4e199ce","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/12bc26ffb3a2be728c9b86e1cae277de5b33dfa4","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/3ff64913615d648cfbb6a6f1cf5529ae7ea829d7","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/ab52d88cb5374876d59aee3c91f9e4ccce2b7ce4","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/da26f368732b83e40e9d356fe61c3d3aaab6d2e8","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-42767","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:08.093","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: An attacker-controlled CMP (Certificate Management Protocol)\nserver could trigger a NULL pointer dereference in a CMP client application.\n\nImpact summary: A NULL pointer dereference causes a crash of the\napplication and a Denial of Service.\n\nAn attacker controlling a CMP server (or acting as a man-in-the-middle) could\ncraft a CMP response containing a CRMF (Certificate Request Message Format)\nCertRepMessage with an EncryptedValue structure where the symmAlg field\nhas an algorithm OID but no parameters field. When the OpenSSL CMP client\nprocesses this response, the NULL dereference occurs, causing a crash of\nthe CMP client.\n\nApplications that process untrusted CMP/CRMF messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: Un servidor CMP (Certificate Management Protocol) controlado por el atacante podría desencadenar una desreferencia de puntero NULL en una aplicación cliente CMP.\n\nResumen del impacto: Una desreferencia de puntero NULL causa un fallo de la aplicación y una denegación de servicio.\n\nUn atacante que controla un servidor CMP (o actuando como un man-in-the-middle) podría elaborar una respuesta CMP que contiene un CertRepMessage CRMF (Certificate Request Message Format) con una estructura EncryptedValue donde el campo symmAlg tiene un OID de algoritmo pero no un campo de parámetros. Cuando el cliente CMP de OpenSSL procesa esta respuesta, la desreferencia NULL ocurre, causando un fallo del cliente CMP.\n\nLas aplicaciones que procesan mensajes CMP/CRMF no confiables pueden verse afectadas.\n\nLos módulos FIPS en 4.0, 3.6, 3.5, 3.4 y 3.0 no se ven afectados por este problema, ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.7","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.21","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T19:44:35.594012Z","id":"CVE-2026-42767","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.21","matchCriteriaId":"EDB88756-EDFE-4886-A267-3F19342A6042"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.6","matchCriteriaId":"BF7E21E7-AEC0-4882-B1F1-2D056B506F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.7","matchCriteriaId":"6B6B9930-C549-4D88-9784-AF32CCDDB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/61a86a8cd73546c9fea916f3d304c1293e05c046","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/665d5254083affde9982efca7c41dd01cacc8774","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/810b722f772652ad48042bcc7ab07e3414b11d0f","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/b90ff3b1bd33b1c18e6a09936d097c2eddef8873","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/e6f912907fc2ec82a0fd07aae55172c5e5e3d90d","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-42768","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:08.223","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to\nBleichenbacher-style attack when an attacker is able to provide the CMS or\nS/MIME messages and observe the error code and/or decryption output.\n\nImpact summary: The Bleichenbacher-style attack allows an attacker to use the\nvictim's vulnerable application as a way to decrypt or sign messages with the\nvictim's private RSA key.\n\nThe attack is possible in 2 variants.\n\n1. The decryption API (CMS_decrypt(), PKCS7_decrypt()) is used without\nproviding the recipient certificate. In this case OpenSSL iterates over every\nKeyTransRecipientInfo (KTRI) without stopping at the first success.\n\nAn attacker who authors a message with two KTRI entries — the first one\nwrapping a real CEK under the victim's public key, the second with an\narbitrary probe ciphertext — obtains opportunity to iterate the 2nd KTRI to\nget a valid PKCS#1 v1.5 padding if the error code of the application is\navailable.\n\nThat is a Bleichenbacher oracle (Bleichenbacher, CRYPTO '98): an\nadaptive-chosen-ciphertext side channel from which the attacker decrypts any\nRSA ciphertext to the victim's key or forges any PKCS#1 v1.5 signature under\nit.\n\n2. When the decryption API (CMS_decrypt(), PKCS7_decrypt()) is provided with\nthe recipient certificate, and the recipient is not found, a random\nkey is substituted.\n\nAn attacker who authors a message and is able to compare both error code and\nthe result of the decryption, can mount a Bleichenbacher oracle.\n\nWe are not aware of any applications that provide a remote attacker\nan opportunity to mount an attack described in these scenarios. We consider\nthe existence of such application very unlikely, and for this reason this\nCVE has been evaluated as Low severity.\n\nTo avoid these attacks, when RSA PKCS#1 v1.5 Key Transport is in use, the\ninvoked EVP_PKEY_decrypt() will use the implicit rejection mechanism described\nin draft-irtf-cfrg-rsa-guidance. In previous OpenSSL releases the implicit\nrejection was explicitly disabled.\n\nThe implicit rejection mechanism always returns a plaintext value,\nthe symmetric key. This result is deterministic for the ciphertext and the\nprivate key.  The length of the decryption result can happen to match the\nlength of the key of the symmetric cipher that was used for the content\nencryption. When a certificate is not provided, the last RecipientInfo\nproducing a key that looks valid will be used. It may cause getting garbage\ncontent on decryption. As a proper way to deal with this a recipient\ncertificate has to be provided to identify the particular RecipientInfo for\ndecryption.\n\nThe FIPS modules in 4.0, 3.6, 3.5, and 3.4 are not affected by this issue, as\nCMS and S/MIME processing happens outside the OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: Las funciones CMS_decrypt y PKCS7_decrypt son vulnerables a un ataque de estilo Bleichenbacher cuando un atacante es capaz de proporcionar los mensajes CMS o S/MIME y observar el código de error y/o la salida del descifrado.\n\nResumen del impacto: El ataque de estilo Bleichenbacher permite a un atacante usar la aplicación vulnerable de la víctima como una forma de descifrar o firmar mensajes con la clave RSA privada de la víctima.\n\nEl ataque es posible en 2 variantes.\n\n1. La API de descifrado (CMS_decrypt(), PKCS7_decrypt()) se utiliza sin proporcionar el certificado del destinatario. En este caso, OpenSSL itera sobre cada KeyTransRecipientInfo (KTRI) sin detenerse en el primer éxito.\n\nUn atacante que crea un mensaje con dos entradas KTRI - la primera envolviendo una CEK real bajo la clave pública de la víctima, la segunda con un texto cifrado de sondeo arbitrario - obtiene la oportunidad de iterar la segunda KTRI para obtener un relleno PKCS#1 v1.5 válido si el código de error de la aplicación está disponible.\n\nEso es un oráculo de Bleichenbacher (Bleichenbacher, CRYPTO '98): un canal lateral de texto cifrado elegido adaptativo desde el cual el atacante descifra cualquier texto cifrado RSA a la clave de la víctima o falsifica cualquier firma PKCS#1 v1.5 bajo ella.\n\n2. Cuando la API de descifrado (CMS_decrypt(), PKCS7_decrypt()) se proporciona con el certificado del destinatario, y el destinatario no se encuentra, se sustituye una clave aleatoria.\n\nUn atacante que crea un mensaje y es capaz de comparar tanto el código de error como el resultado del descifrado, puede montar un oráculo de Bleichenbacher.\n\nNo tenemos conocimiento de ninguna aplicación que proporcione a un atacante remoto la oportunidad de montar un ataque descrito en estos escenarios. Consideramos muy improbable la existencia de dicha aplicación, y por esta razón este CVE ha sido evaluado como de severidad Baja.\n\nPara evitar estos ataques, cuando el transporte de clave RSA PKCS#1 v1.5 está en uso, la función EVP_PKEY_decrypt() invocada utilizará el mecanismo de rechazo implícito descrito en draft-irtf-cfrg-rsa-guidance. En versiones anteriores de OpenSSL, el rechazo implícito estaba explícitamente deshabilitado.\n\nEl mecanismo de rechazo implícito siempre devuelve un valor de texto plano, la clave simétrica. Este resultado es determinista para el texto cifrado y la clave privada. La longitud del resultado del descifrado puede coincidir con la longitud de la clave del cifrado simétrico que se utilizó para el cifrado del contenido. Cuando no se proporciona un certificado, se utilizará el último RecipientInfo que produzca una clave que parezca válida. Puede causar la obtención de contenido basura en el descifrado. Como una forma adecuada de lidiar con esto, se debe proporcionar un certificado de destinatario para identificar el RecipientInfo particular para el descifrado.\n\nLos módulos FIPS en 4.0, 3.6, 3.5 y 3.4 no se ven afectados por este problema, ya que el procesamiento de CMS y S/MIME ocurre fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.7","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T19:40:18.647253Z","id":"CVE-2026-42768","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-514"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.6","matchCriteriaId":"BF7E21E7-AEC0-4882-B1F1-2D056B506F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.7","matchCriteriaId":"6B6B9930-C549-4D88-9784-AF32CCDDB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/a2ca7b2d73e0ffc1eae183fe6e1741dac767cb4f","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/bbb151a83041705d9d001ed2f9c12f5523e1b54d","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/dd68364107a58841c0a2546812518b65d3a23abd","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/f04b377be3d821741c86d1f4bf84dee09f3d5c3e","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-42769","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:08.377","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue Summary: An error in the callback used to verify the certificate\nprovided in a Root CA key update Certificate Management Protocol (CMP)\nmessage response rendered the certificate validation ineffectual, which\ncould lead to escalation of credentials from the Registration Authority (RA)\nlevel to the root Certification Authority (root CA) level.\n\nImpact Summary: The Registration Autority could replace the root CA\ncertificate for the CMP clients with an arbitrary root CA certificate.\n\nOne of the parts of the Certificate Management Protocol (CMP), specified in\nRFC 9810, is Root Certification Authority (root CA) key Rollover,\nwhich is sent by the server in a message with type 'id-it-rootCaKeyUpdate'.\nAs part of these messages, 'newWithOld' certificate, the new root CA\ncertificate signed with the old root CA key, is provided, and verifying its\nsignature is crucial for transferring the trust from the old CA key to the\nnew one.\n\nThe 'id-it-rootCaKeyUpdate' messages are expected to be processed with\nOSSL_CMP_get1_rootCaKeyUpdate(), that is expected to verify the 'newWithOld'\ncertificate.  A typo in the certificate chain building code led to adding\nan incorrect certificate ('newWithOld' instead of 'oldRoot') to the\ncertificate chain, rendering the certificate verification process ineffectual\n(only the issuer name and the algorithm OIDs were verified by other parts\nof the verification code).\n\nAn attacker who already has credentials that satisfy the CMP message\nprotection checks can generate a new key pair and use a crafted self-signed\ncertificate in its 'id-it-rootCaKeyUpdate' CMP messages which affected CMP\nclients would accept as a new trust anchor.\n\nSignificant preconditions for the attack (having valid RA-level credentials)\nare the reason the issue was assigned Low severity.\n\nThe FIPS modules are not affected by this issue, as the affected code is\noutside the OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del Problema: Un error en la función de devolución de llamada utilizada para verificar el certificado proporcionado en una respuesta de mensaje del Protocolo de Gestión de Certificados (CMP) de actualización de clave de CA raíz hizo que la validación del certificado fuera ineficaz, lo que podría llevar a la escalada de credenciales del nivel de Autoridad de Registro (RA) al nivel de Autoridad de Certificación raíz (CA raíz).\n\nResumen del Impacto: La Autoridad de Registro podría reemplazar el certificado de CA raíz para los clientes CMP con un certificado de CA raíz arbitrario.\n\nUna de las partes del Protocolo de Gestión de Certificados (CMP), especificado en RFC 9810, es la Sustitución de Clave de Autoridad de Certificación raíz (CA raíz), que es enviada por el servidor en un mensaje de tipo 'id-it-rootCaKeyUpdate'. Como parte de estos mensajes, se proporciona el certificado 'newWithOld', el nuevo certificado de CA raíz firmado con la clave de CA raíz antigua, y verificar su firma es crucial para transferir la confianza de la clave de CA antigua a la nueva.\n\nSe espera que los mensajes 'id-it-rootCaKeyUpdate' sean procesados con OSSL_CMP_get1_rootCaKeyUpdate(), que se espera que verifique el certificado 'newWithOld'. Un error tipográfico en el código de construcción de la cadena de certificados llevó a añadir un certificado incorrecto ('newWithOld' en lugar de 'oldRoot') a la cadena de certificados, haciendo que el proceso de verificación del certificado fuera ineficaz (solo el nombre del emisor y los OID del algoritmo fueron verificados por otras partes del código de verificación).\n\nUn atacante que ya tiene credenciales que satisfacen las comprobaciones de protección de mensajes CMP puede generar un nuevo par de claves y usar un certificado autofirmado manipulado en sus mensajes CMP 'id-it-rootCaKeyUpdate' que los clientes CMP afectados aceptarían como un nuevo ancla de confianza.\n\nLas precondiciones significativas para el ataque (tener credenciales válidas a nivel de RA) son la razón por la que el problema fue asignado con severidad Baja.\n\nLos módulos FIPS no se ven afectados por este problema, ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.7","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T19:38:00.495097Z","id":"CVE-2026-42769","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.6","matchCriteriaId":"BF7E21E7-AEC0-4882-B1F1-2D056B506F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.7","matchCriteriaId":"6B6B9930-C549-4D88-9784-AF32CCDDB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/54d0989997e5fc26057009a9782c3441ce3842fb","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/777b363b16fcf2153bb3ded39dc3838713667c44","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/d35cd473a271bf3ce7bf3d32af53217fb83ae92c","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/d531f21c0fe99067a66fc0ff1161ef127f9cd70b","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-42771","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:08.663","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: When the X509_VERIFY_PARAM_set1_email is called by an\napplication to validate a crafted e-mail address, such as during S/MIME\nmessage validation, an out of bounds read can happen.\n\nImpact summary: This out of bounds read will not directly exfiltrate\nthe data read to the attacker so the most likely result is a crash and\na Denial of Service.\n\nAn internal helper function called from X509_VERIFY_PARAM_[set|add]_email()\nused a wrong length when validating the local part of an email address.\nThis could cause the 64 octet limit on the local part of an email address\nto be not enforced, or cause an out of bound read and potentially a crash.\n\nThe bug is reachable via S-MIME validation with a crafted From: address\nsupplied in an email message that can potentially cause a crash.\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: Cuando una aplicación llama a X509_VERIFY_PARAM_set1_email para validar una dirección de correo electrónico manipulada, como durante la validación de mensajes S/MIME, puede ocurrir una lectura fuera de límites.\n\nResumen del impacto: Esta lectura fuera de límites no exfiltrará directamente los datos leídos al atacante, por lo que el resultado más probable es un fallo y una denegación de servicio.\n\nUna función auxiliar interna llamada desde X509_VERIFY_PARAM_[set|add]_email() utilizó una longitud incorrecta al validar la parte local de una dirección de correo electrónico. Esto podría causar que no se aplicara el límite de 64 octetos en la parte local de una dirección de correo electrónico, o causar una lectura fuera de límites y potencialmente un fallo.\n\nEl error es alcanzable a través de la validación S-MIME con una dirección From: manipulada proporcionada en un mensaje de correo electrónico que puede causar potencialmente un fallo.\n\nNingún módulo FIPS se ve afectado por este problema, ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T18:59:41.123767Z","id":"CVE-2026-42771","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/6cd187689f8180c1f8a3acde21f88190c4a20de7","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-45445","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:18.993","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: When an application drives an AES-OCB context through the\npublic EVP_Cipher() one-shot interface, the application-supplied\ninitialisation vector (IV) is silently discarded.\n\nImpact summary: Every message encrypted under the same key uses the\nsame effective nonce regardless of the IV supplied by the caller,\nresulting in (key, nonce) reuse and loss of confidentiality.  If the\nsame code path is used to compute the authentication tag, the tag\ndepends only on the (key, IV) pair and not on the plaintext or\nciphertext, allowing universal forgery of arbitrary ciphertext from a\nsingle captured message.\n\nOpenSSL provides two ways to drive a cipher: the documented streaming\ninterface (EVP_CipherUpdate / EVP_CipherFinal_ex) and a lower-level\none-shot, EVP_Cipher(), whose documentation explicitly recommends\nagainst use by applications in favour of EVP_CipherUpdate() and\nEVP_CipherFinal_ex().  The OCB provider's streaming handler flushes\nthe application-supplied IV into the OCB context before processing\ndata; the one-shot handler did not.  Every call to EVP_Cipher() on an\nAES-OCB context therefore ran with the all-zero key-derived offset\nstate left by cipher initialisation, regardless of the caller's IV.\n\nIf EVP_EncryptFinal_ex() is subsequently used to obtain the\nauthentication tag, the deferred IV setup runs at that point and\nclears the running checksum that should have been accumulated over the\nplaintext.  The resulting tag is a function of (key, IV) only and\nverifies against any ciphertext produced under the same (key, IV)\npair.\n\nThe OpenSSL SSL/TLS implementation is not affected: AES-OCB is not a\nTLS cipher suite, and libssl does not call EVP_Cipher() in any case.\nApplications that drive AES-OCB through the documented streaming AEAD\nAPI (EVP_CipherUpdate / EVP_CipherFinal_ex) are not affected.  Only\napplications that combine the AES-OCB cipher with the EVP_Cipher()\none-shot API are vulnerable.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as AES-OCB is outside the OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: Cuando una aplicación maneja un contexto AES-OCB a través de la interfaz de un solo uso pública EVP_Cipher(), el vector de inicialización (IV) proporcionado por la aplicación es descartado silenciosamente.\n\nResumen del impacto: Cada mensaje cifrado bajo la misma clave utiliza el mismo nonce efectivo independientemente del IV proporcionado por el llamador, lo que resulta en la reutilización de (clave, nonce) y la pérdida de confidencialidad. Si la misma ruta de código se utiliza para calcular la etiqueta de autenticación, la etiqueta depende solo del par (clave, IV) y no del texto plano o del texto cifrado, lo que permite la falsificación universal de texto cifrado arbitrario a partir de un único mensaje capturado.\n\nOpenSSL proporciona dos formas de manejar un cifrado: la interfaz de streaming documentada (EVP_CipherUpdate / EVP_CipherFinal_ex) y una de un solo uso de nivel inferior, EVP_Cipher(), cuya documentación recomienda explícitamente no ser utilizada por las aplicaciones en favor de EVP_CipherUpdate() y EVP_CipherFinal_ex(). El gestor de streaming del proveedor OCB vacía el IV proporcionado por la aplicación en el contexto OCB antes de procesar los datos; el gestor de un solo uso no lo hacía. Cada llamada a EVP_Cipher() en un contexto AES-OCB, por lo tanto, se ejecutaba con el estado de desplazamiento derivado de la clave todo-cero dejado por la inicialización del cifrado, independientemente del IV del llamador.\n\nSi EVP_EncryptFinal_ex() se utiliza posteriormente para obtener la etiqueta de autenticación, la configuración diferida del IV se ejecuta en ese momento y borra la suma de verificación en ejecución que debería haberse acumulado sobre el texto plano. La etiqueta resultante es una función de (clave, IV) solamente y verifica cualquier texto cifrado producido bajo el mismo par (clave, IV).\n\nLa implementación SSL/TLS de OpenSSL no se ve afectada: AES-OCB no es una suite de cifrado TLS, y libssl no llama a EVP_Cipher() en ningún caso. Las aplicaciones que manejan AES-OCB a través de la API AEAD de streaming documentada (EVP_CipherUpdate / EVP_CipherFinal_ex) no se ven afectadas. Solo las aplicaciones que combinan el cifrado AES-OCB con la API de un solo uso EVP_Cipher() son vulnerables.\n\nLos módulos FIPS en 4.0, 3.6, 3.5, 3.4 y 3.0 no se ven afectados por este problema, ya que AES-OCB está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.7","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.21","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T19:22:47.789275Z","id":"CVE-2026-45445","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-325"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.21","matchCriteriaId":"EDB88756-EDFE-4886-A267-3F19342A6042"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.6","matchCriteriaId":"BF7E21E7-AEC0-4882-B1F1-2D056B506F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.7","matchCriteriaId":"6B6B9930-C549-4D88-9784-AF32CCDDB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/323f0b6e7d530a4cb4336d50c88cb70f3ac2a451","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/787a6dfba81b7b09c1e05ab31396c0cd7c36b3f7","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7ac4715234ee72d9f3c93426a2c08554b5b771af","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/843c9b94ca9c2ed248bb30127bb4f3d7af0d607c","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/983d54b5cce8d16147548ed1a37892d1720bbab6","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-45446","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:19.137","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV\n(RFC 8452) mishandle the authentication of AAD (Additional Authenticated\nData) with an empty ciphertext allowing a forgery of such messages.\n\nImpact summary: An attacker can forge empty messages with arbitrary AAD\nto the victim's application using these ciphers.\n\nAES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) are nonce-misuse-resistant AEAD\nmodes: they accept a key, nonce, optional AAD (bytes that are authenticated\nbut not encrypted), and plaintext, and produces ciphertext plus a 16-byte\ntag. On decrypt, `EVP_DecryptFinal_ex()` is documented to return success only\nif the tag is verified succesfully.\n\nIn OpenSSL's provider implementation of these ciphers, the expected tag is\ncomputed only when decryption function is invoked with non-empty data.\nIf the caller supplies AAD and then calls `EVP_DecryptFinal_ex()` without\ninvocation of the ciphertext update, which can happen when the received\nciphertext length is zero, the tag is never recalculated and still holds its\nall-zeros value.\n\nWhen AES-GCM-SIV is used, an attacker who sends arbitrary AAD, empty\nciphertext, and all-zeros tag passes authentication under any key they do not\nknow, single-shot. When AES-SIV is used, for mounting the attack it's\nnecessary for the application to reuse the decryption context without\nresetting the key.\n\nAES-SIV is implemented since OpenSSL 3.0. AES-GCM-SIV is implemented since\nOpenSSL 3.2.\n\nNo protocols implemented in OpenSSL itself (TLS/CMS/PKCS7/HPKE/QUIC) support\neither AES-GCM-SIV or AES-SIV. To mount an attack, the applications must\nimplement their own protocol and use the EVP interface. Also they must skip the\nciphertext update when a message with an empty ciphertext arrives.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as these algorithms are not FIPS approved and the affected code is\noutside the OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: Las implementaciones de AES-SIV (RFC 5297) y AES-GCM-SIV (RFC 8452) manejan incorrectamente la autenticación de AAD (Datos Autenticados Adicionales) con un texto cifrado vacío, permitiendo una falsificación de dichos mensajes.\n\nResumen del impacto: Un atacante puede falsificar mensajes vacíos con AAD arbitrario a la aplicación de la víctima usando estos cifrados.\n\nAES-SIV (RFC 5297) y AES-GCM-SIV (RFC 8452) son modos AEAD resistentes al uso indebido de nonce: aceptan una clave, nonce, AAD opcional (bytes que son autenticados pero no cifrados) y texto plano, y producen texto cifrado más una etiqueta de 16 bytes. Al descifrar, 'EVP_DecryptFinal_ex()' está documentado para devolver éxito solo si la etiqueta se verifica con éxito.\n\nEn la implementación del proveedor de OpenSSL de estos cifrados, la etiqueta esperada se calcula solo cuando la función de descifrado se invoca con datos no vacíos. Si el llamador suministra AAD y luego llama a 'EVP_DecryptFinal_ex()' sin invocar la actualización del texto cifrado, lo que puede ocurrir cuando la longitud del texto cifrado recibido es cero, la etiqueta nunca se recalcula y aún mantiene su valor de todo ceros.\n\nCuando se usa AES-GCM-SIV, un atacante que envía AAD arbitrario, texto cifrado vacío y una etiqueta de todo ceros pasa la autenticación bajo cualquier clave que no conozca, de una sola vez. Cuando se usa AES-SIV, para montar el ataque es necesario que la aplicación reutilice el contexto de descifrado sin restablecer la clave.\n\nAES-SIV está implementado desde OpenSSL 3.0. AES-GCM-SIV está implementado desde OpenSSL 3.2.\n\nNingún protocolo implementado en OpenSSL mismo (TLS/CMS/PKCS7/HPKE/QUIC) soporta AES-GCM-SIV o AES-SIV. Para montar un ataque, las aplicaciones deben implementar su propio protocolo y usar la interfaz EVP. También deben omitir la actualización del texto cifrado cuando llega un mensaje con un texto cifrado vacío.\n\nLos módulos FIPS en 4.0, 3.6, 3.5, 3.4 y 3.0 no se ven afectados por este problema, ya que estos algoritmos no están aprobados por FIPS y el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.7","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.21","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":4.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T18:48:41.903041Z","id":"CVE-2026-45446","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-325"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.21","matchCriteriaId":"EDB88756-EDFE-4886-A267-3F19342A6042"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.6","matchCriteriaId":"BF7E21E7-AEC0-4882-B1F1-2D056B506F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.7","matchCriteriaId":"6B6B9930-C549-4D88-9784-AF32CCDDB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/25b32cd9d41d2bc01b6abc425bb4baf2c2236fdc","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/71e2a5d263518cf5866043bd60ee4994d59e53a3","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7fe3f33a3b3a4c487aa4dcdbc87057f66ffd2b85","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/daca0f48e4a69a2892a62262bad59e62a8a76598","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/eec5e9bf0d867333b8495e456f5235d225798a68","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-45447","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:19.277","lastModified":"2026-09-18T13:18:26.343","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."},{"lang":"es","value":"Resumen del problema: Un mensaje firmado PKCS#7 o S/MIME especialmente diseñado podría desencadenar un uso después de liberación durante la verificación de firma PKCS#7.\n\nResumen del impacto: Un uso después de liberación puede resultar en caídas de proceso, corrupción de heap o potencialmente ejecución remota de código.\n\nAl procesar un mensaje firmado PKCS#7 o S/MIME, si el campo digestAlgorithms de SignedData está presente como un SET ASN.1 vacío, OpenSSL puede liberar incorrectamente un BIO propiedad del llamador durante PKCS7_verify(). Un uso posterior del BIO por la aplicación llamadora resulta en una condición de uso después de liberación.\n\nEn el caso común, esto ocurre cuando la aplicación llama posteriormente a BIO_free() en el BIO pasado originalmente a PKCS7_verify(). Dependiendo del comportamiento del asignador y de los patrones de uso de BIO específicos de la aplicación, esto puede resultar en una caída u otra corrupción de memoria. En algunos contextos de aplicación, esto podría ser potencialmente explotable para ejecución remota de código.\n\nLas aplicaciones que procesan mensajes firmados PKCS#7 o S/MIME utilizando las APIs PKCS#7 de OpenSSL pueden verse afectadas. Las aplicaciones que utilizan las APIs CMS para este procesamiento no se ven afectadas.\n\nLos módulos FIPS en 4.0, 3.6, 3.5, 3.4 y 3.0 no se ven afectados por este problema, ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.7","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.21","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1zh","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zq","versionType":"custom","status":"affected"}]}]},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","affectedData":[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"versions":[{"version":"1:3.5.5-4.el10_2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/o:redhat:rhel_els:6"],"versions":[{"version":"0:1.0.1e-61.el6_10.1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/o:redhat:rhel_els:7"],"versions":[{"version":"1:1.0.2k-26.el7_9.2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"compat-openssl10","cpes":["cpe:/a:redhat:enterprise_linux:8"],"versions":[{"version":"1:1.0.2o-4.el8_10.3","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/o:redhat:enterprise_linux:8"],"versions":[{"version":"1:1.1.1k-16.el8_6","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/o:redhat:rhel_eus_long_life:8.6"],"versions":[{"version":"1:1.1.1k-16.el8_6","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"compat-openssl10","cpes":["cpe:/a:redhat:rhel_tus:8.8"],"versions":[{"version":"1:1.0.2o-4.el8_8.1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/o:redhat:rhel_tus:8.8"],"versions":[{"version":"1:1.1.1k-16.el8_6","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"compat-openssl10","cpes":["cpe:/a:redhat:rhel_e4s:8.8"],"versions":[{"version":"1:1.0.2o-4.el8_8.1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/o:redhat:rhel_e4s:8.8"],"versions":[{"version":"1:1.1.1k-16.el8_6","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/a:redhat:enterprise_linux:9","cpe:/o:redhat:enterprise_linux:9"],"versions":[{"version":"1:3.5.5-4.el9_8","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"compat-openssl11","cpes":["cpe:/a:redhat:enterprise_linux:9"],"versions":[{"version":"1:1.1.1k-5.el9_8.4","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"compat-openssl11","cpes":["cpe:/a:redhat:rhel_e4s:9.2"],"versions":[{"version":"1:1.1.1k-4.el9_2.2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"compat-openssl11","cpes":["cpe:/a:redhat:rhel_e4s:9.4"],"versions":[{"version":"1:1.1.1k-5.el9_4.3","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"compat-openssl11","cpes":["cpe:/a:redhat:rhel_eus:9.6"],"versions":[{"version":"1:1.1.1k-5.el9_6.3","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.12","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhcos","cpes":["cpe:/a:redhat:openshift:4.12::el8"],"versions":[{"version":"412.86.202608241157-0","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Cost Management 4","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"costmanagement/costmanagement-metrics-rhel9-operator","cpes":["cpe:/a:redhat:cost_management:4::el9"],"versions":[{"version":"1783539156","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"multicluster engine for Kubernetes 2.8","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"multicluster-engine/console-mce-rhel9","cpes":["cpe:/a:redhat:multicluster_engine:2.8::el9"],"versions":[{"version":"1785078604","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Advanced Cluster Management for Kubernetes 2.13","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhacm2/console-rhel9","cpes":["cpe:/a:redhat:acm:2.13::el9"],"versions":[{"version":"1785078581","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Discovery 2","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"discovery/discovery-server-rhel9","cpes":["cpe:/a:redhat:discovery:2::el9"],"versions":[{"version":"1782159791","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Discovery 2","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"discovery/discovery-ui-rhel9","cpes":["cpe:/a:redhat:discovery:2::el9"],"versions":[{"version":"1782166952","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Insights proxy 1.5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"insights-proxy/insights-proxy-container-rhel9","cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"versions":[{"version":"1782890503","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/cds-rhel9","cpes":["cpe:/a:redhat:rhui:5::el9"],"versions":[{"version":"1781525684","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/haproxy-rhel9","cpes":["cpe:/a:redhat:rhui:5::el9"],"versions":[{"version":"1781525671","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/installer-rhel9","cpes":["cpe:/a:redhat:rhui:5::el9"],"versions":[{"version":"1781525693","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/rhua-rhel9","cpes":["cpe:/a:redhat:rhui:5::el9"],"versions":[{"version":"1781525739","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/cds-kubernetes-tp-rhel9","cpes":["cpe:/a:redhat:rhui:5::el9"],"versions":[{"version":"1787241211","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/installer-tp-rhel9","cpes":["cpe:/a:redhat:rhui:5::el9"],"versions":[{"version":"1787135742","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhui5/rhua-tp-rhel9","cpes":["cpe:/a:redhat:rhui:5::el9"],"versions":[{"version":"1787241260","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/hive-rhel9","cpes":["cpe:/a:redhat:multicluster_engine"]},{"vendor":"Red Hat","product":"Multicluster Engine for Kubernetes","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"multicluster-engine/hypershift-rhel9-operator","cpes":["cpe:/a:redhat:multicluster_engine"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"edk2","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim-unsigned-aarch64","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim-unsigned-x64","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ovmf","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim-signed","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"edk2","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"mingw-openssl","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim-unsigned-x64","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"edk2","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim-unsigned-aarch64","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"shim-unsigned-x64","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"chunkah","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netavark","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshell","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openssl3","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"python-cryptography","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ruby3.3","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ruby3.4","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ruby4.0","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rust","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rust-bootupd","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rust-podman-sequoia","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"unbound","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat JBoss Core Services","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"jbcs-httpd24-openssl","cpes":["cpe:/a:redhat:jboss_core_services:1"]},{"vendor":"Red Hat","product":"Red Hat JBoss Core Services","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"jbcs-openssl-win6-x86_64.zip","cpes":["cpe:/a:redhat:jboss_core_services:1"]},{"vendor":"Red Hat","product":"Red Hat JBoss Web Server 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"jws-optional-native-components-win6-x86_64.zip","cpes":["cpe:/a:redhat:jboss_enterprise_web_server:6"]},{"vendor":"Red Hat","product":"Red Hat JBoss Web Server 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"jws-optional-native-components-win6-x86_64.zip","cpes":["cpe:/a:redhat:jboss_enterprise_web_server:7"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift/ose-rhel-coreos-8","cpes":["cpe:/a:redhat:openshift:4"]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-10T03:59:38.212378Z","id":"CVE-2026-45447","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","type":"Secondary","description":[{"lang":"en","value":"CWE-825"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zq","matchCriteriaId":"F534B804-67B6-49DA-8A86-0FF21E512908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1zh","matchCriteriaId":"43EFE1E3-4049-4EE6-A2AE-BDBA38E6870F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.21","matchCriteriaId":"EDB88756-EDFE-4886-A267-3F19342A6042"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.6","matchCriteriaId":"BF7E21E7-AEC0-4882-B1F1-2D056B506F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.7","matchCriteriaId":"6B6B9930-C549-4D88-9784-AF32CCDDB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25237","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:25239","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:26275","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:26319","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:29197","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:34102","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:35869","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:36215","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:36217","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:39009","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:39012","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:39981","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:44438","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:47735","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:47737","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:58563","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:59831","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:66524","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/security/cve/CVE-2026-45447","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2481898","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}]}},{"cve":{"id":"CVE-2026-7383","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:50.337","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A signed integer overflow when sizing the destination\nbuffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap\nbuffer overflow.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nattacker controlled code execution or other undefined behaviour.\n\nIn ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination\nsize for Unicode output is computed in a signed int: by left shift\nof the input character count for BMPSTRING (UTF-16) and\nUNIVERSALSTRING (UTF-32), and by summing per-character byte counts\nfor UTF8STRING. The calculation overflows when the input reaches\naround 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30\ncharacters) the size wraps to zero, OPENSSL_malloc(1) is called, and\nthe subsequent character copy writes several gigabytes past the\none-byte allocation.\n\nX.509 certificate processing routes through ASN1_STRING_set_by_NID(),\nwhose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID\nsize limits cap the input length; no network protocol or\ncertificate-handling path in OpenSSL exercises the overflow.\nTriggering the bug requires an application that calls\nASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers\na custom string type via ASN1_STRING_TABLE_add(), with\nattacker-controlled input on the order of half a gigabyte or more.\nFor these reasons this issue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as the affected code is outside the OpenSSL FIPS module\nboundary."},{"lang":"es","value":"Resumen del problema: Un desbordamiento de entero con signo al dimensionar el búfer de destino para la salida Unicode en ASN1_mbstring_ncopy() puede conducir a un desbordamiento de búfer de pila.\n\nResumen del impacto: Un desbordamiento de búfer de pila puede conducir a un fallo o posiblemente a la ejecución de código controlado por el atacante u otro comportamiento indefinido.\n\nEn ASN1_mbstring_copy() y ASN1_mbstring_ncopy() el tamaño de destino para la salida Unicode se calcula en un entero con signo: mediante un desplazamiento a la izquierda del recuento de caracteres de entrada para BMPSTRING (UTF-16) y UNIVERSALSTRING (UTF-32), y sumando los recuentos de bytes por carácter para UTF8STRING. El cálculo desborda cuando la entrada alcanza alrededor de 2^30 caracteres. En el peor de los casos (UNIVERSALSTRING con 2^30 caracteres) el tamaño se ajusta a cero, se llama a OPENSSL_malloc(1), y la copia de caracteres subsiguiente escribe varios gigabytes más allá de la asignación de un byte.\n\nEl procesamiento de certificados X.509 se encamina a través de ASN1_STRING_set_by_NID(), cuya máscara DIRSTRING_TYPE excluye UNIVERSALSTRING y cuyos límites de tamaño por NID restringen la longitud de entrada; ningún protocolo de red o ruta de manejo de certificados en OpenSSL ejerce el desbordamiento. Activar el error requiere una aplicación que llama a ASN1_mbstring_copy() o ASN1_mbstring_ncopy() directamente, o registra un tipo de cadena personalizado a través de ASN1_STRING_TABLE_add(), con entrada controlada por el atacante del orden de medio gigabyte o más. Por estas razones, a este problema se le asignó una severidad Baja.\n\nLos módulos FIPS en 4.0, 3.6, 3.5, 3.4 y 3.0 no se ven afectados por este problema, ya que el código afectado está fuera del límite del módulo FIPS de OpenSSL."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.7","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.21","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1zh","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zq","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T00:00:00+00:00","id":"CVE-2026-7383","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zq","matchCriteriaId":"F534B804-67B6-49DA-8A86-0FF21E512908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1zh","matchCriteriaId":"43EFE1E3-4049-4EE6-A2AE-BDBA38E6870F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.21","matchCriteriaId":"EDB88756-EDFE-4886-A267-3F19342A6042"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.6","matchCriteriaId":"BF7E21E7-AEC0-4882-B1F1-2D056B506F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.7","matchCriteriaId":"6B6B9930-C549-4D88-9784-AF32CCDDB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/4f8d2bddaa2c8e06f9c33390ee1717059a6e4be6","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/80c15faaf78042bbb8654a0e234c50c381732f74","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/bd17511070fb39a67bfa19682affb765e706a974","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/c332adaced43bcbb85f97410597e951c11ec3083","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/d32350ae8ef7426718f5aa9e383d4b51398ee255","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-9076","sourceIdentifier":"openssl-security@openssl.org","published":"2026-06-09T17:17:50.997","lastModified":"2026-07-23T08:10:00.137","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)\nprocesses attacker-supplied CMS data, an attacker-chosen stream-mode KEK\ncipher can trigger a heap out-of-bounds read in kek_unwrap_key().\n\nImpact summary: A heap buffer over-read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not revealed to the attacker.\n\nThe key unwrapping function performs a check-byte test as specified in the\nRFC that reads 7 bytes from a heap allocation that is based on the wrapped\nkey length from the message. There is a minimum length check based on the\nblock length of the wrapping cipher. However the cipher is selected from\nan OID carried in the attacker's PWRI keyEncryptionAlgorithm with no\nrequirement that the cipher be a block cipher. When an attacker selects\na stream-mode cipher the guard will be ineffective and the allocated buffer\ncontaining the unwrapped key can be too small to fit the check-bytes\nspecified in the RFC and a buffer over-read can happen.\n\nApplications calling CMS_decrypt() or CMS_decrypt_set1_password()\n(equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS\ndata are vulnerable to this issue. No password knowledge is required: the\nover-read happens during the unwrap attempt before any authentication\nsucceeds.\n\nThe over-read is limited to a few bytes and is not written to output, so\nthere is no information disclosure. Triggering a crash requires the\nallocation to border unmapped memory, which is unlikely with the normal\nallocator.\n\nThe FIPS modules are not affected by this issue."},{"lang":"es","value":"Resumen del problema: Cuando el descifrado basado en contraseña de CMS (RFC 3211 / desenvolvimiento de clave PWRI) procesa datos CMS suministrados por el atacante, un cifrado KEK en modo de flujo elegido por el atacante puede desencadenar una lectura fuera de límites en el heap en kek_unwrap_key().\n\nResumen del impacto: Una lectura excesiva del búfer del heap puede desencadenar un fallo que lleva a la denegación de servicio para una aplicación si el búfer de entrada termina en un límite de página de memoria y la página siguiente no está mapeada. No hay revelación de información ya que los bytes leídos en exceso no se revelan al atacante.\n\nLa función de desenvolvimiento de clave realiza una prueba de bytes de verificación según lo especificado en el RFC que lee 7 bytes de una asignación en el heap que se basa en la longitud de la clave envuelta del mensaje. Hay una verificación de longitud mínima basada en la longitud de bloque del cifrado de envoltura. Sin embargo, el cifrado se selecciona de un OID transportado en el algoritmo de cifrado de clave PWRI del atacante sin el requisito de que el cifrado sea un cifrado de bloque. Cuando un atacante selecciona un cifrado en modo de flujo, la protección será ineficaz y el búfer asignado que contiene la clave desenvuelta puede ser demasiado pequeño para contener los bytes de verificación especificados en el RFC y puede ocurrir una lectura excesiva del búfer.\n\nLas aplicaciones que llaman a 'CMS_decrypt()' o 'CMS_decrypt_set1_password()' (equivalentemente OpenSSL cms -decrypt -pwri_password ...) en datos CMS no confiables son vulnerables a este problema. No se requiere conocimiento de la contraseña: la lectura excesiva ocurre durante el intento de desenvolvimiento antes de que cualquier autenticación tenga éxito.\n\nLa lectura excesiva está limitada a unos pocos bytes y no se escribe en la salida, por lo que no hay revelación de información. Desencadenar un fallo requiere que la asignación limite con memoria no mapeada, lo cual es poco probable con el asignador normal.\n\nLos módulos FIPS no se ven afectados por este problema."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.1","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.3","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.7","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.6","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.21","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1zh","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zq","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-09T19:04:07.840133Z","id":"CVE-2026-9076","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zq","matchCriteriaId":"F534B804-67B6-49DA-8A86-0FF21E512908"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1zh","matchCriteriaId":"43EFE1E3-4049-4EE6-A2AE-BDBA38E6870F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.21","matchCriteriaId":"EDB88756-EDFE-4886-A267-3F19342A6042"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.6","matchCriteriaId":"BF7E21E7-AEC0-4882-B1F1-2D056B506F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.7","matchCriteriaId":"6B6B9930-C549-4D88-9784-AF32CCDDB87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.3","matchCriteriaId":"D41B3C45-EC73-4DC8-989D-B2E2792E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*","matchCriteriaId":"6E881B9A-1A0A-4BC0-8160-20C00561167D"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/05b066366842f930fadd9a6e94df98030af431bb","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/3d8d5bc1056b2f62da9fede23fedbf47e85187b0","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/715349a1d7c6db970e6815dafb90915f07307f98","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/77bf00ab13f6ff5e516535432f0328ed70ec0c26","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/eecbe330977e8d023aae1ca2d9bdbe983ef3fdc6","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260609.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-50010","sourceIdentifier":"security-advisories@github.com","published":"2026-06-12T16:16:31.180","lastModified":"2026-09-18T13:18:31.640","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SimpleTrustManagerFactory.engineGetTrustManagers() and related paths wrap any user-supplied plain X509TrustManager in X509TrustManagerWrapper, which extends X509ExtendedTrustManager but implements the 3-arg checkServerTrusted(chain, authType, SSLEngine) by discarding the SSLEngine and calling the 2-arg delegate. Because the object now IS an X509ExtendedTrustManager, neither SunJSSE's internal AbstractTrustManagerWrapper nor Netty's own OpenSslX509TrustManagerWrapper will re-wrap it to add endpoint-identification. Consequently, even though Netty 4.2 sets endpointIdentificationAlgorithm=\"HTTPS\" by default, a client built with `SslContextBuilder.forClient().trustManager(somePlainX509TrustManager)` performs no hostname verification at all. Versions 4.1.135.Final and 4.2.15.Final patch the issue."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"netty","product":"netty","versions":[{"version":">= 4.2.0.Final, < 4.2.15.Final","status":"affected"},{"version":"< 4.1.135.Final","status":"affected"}]}]},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","affectedData":[{"vendor":"Red Hat","product":"Cryostat 4 on RHEL 9","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"cryostat/cryostat-reports-rhel9","cpes":["cpe:/a:redhat:cryostat:4::el9"],"versions":[{"version":"4.2.0-13","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Cryostat 4 on RHEL 9","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"cryostat/cryostat-rhel9","cpes":["cpe:/a:redhat:cryostat:4::el9"],"versions":[{"version":"4.2.0-13","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Cryostat 4 on RHEL 9","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"cryostat/jfr-datasource-rhel9","cpes":["cpe:/a:redhat:cryostat:4::el9"],"versions":[{"version":"4.2.0-13","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat AMQ Broker 7.13.6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:amq_broker:7.13"]},{"vendor":"Red Hat","product":"Red Hat AMQ Broker 7.14.1","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:amq_broker:7.14"]},{"vendor":"Red Hat","product":"Red Hat Build of Apache Camel 3.33 for Quarkus 3.33.2.SP1","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:apache_camel_quarkus:3.33"]},{"vendor":"Red Hat","product":"Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:apache_camel_spring_boot:4.18"]},{"vendor":"Red Hat","product":"Red Hat build of Quarkus 3.27.4.SP1","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:quarkus:3.27::el8"]},{"vendor":"Red Hat","product":"Red Hat build of Quarkus 3.33.2.SP1","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:quarkus:3.33::el8"]},{"vendor":"Red Hat","product":"Red Hat Data Grid 8.6.2","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:jboss_data_grid:8"]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-activemq-artemis","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:2.16.0-22.redhat_00057.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-glassfish-jsf","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:2.3.14-11.SP11_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-ironjacamar","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:1.5.26-2.Final_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-annotations","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-core","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-databind","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-jaxrs-providers","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-modules-base","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-modules-java8","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-remoting","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:5.0.31-3.SP2_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-server-migration","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:1.10.0-46.Final_redhat_00044.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-netty","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:4.1.135-1.Final_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-netty-transport-native-epoll","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:4.1.135-1.Final_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-picketlink-bindings","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:2.5.5-30.SP12_redhat_00020.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-picketlink-federation","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:2.5.5-24.SP12_redhat_00016.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-undertow","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:2.2.40-2.SP3_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"],"versions":[{"version":"0:7.4.25-2.GA_redhat_00001.1.el7eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-activemq-artemis","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:2.16.0-22.redhat_00057.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-glassfish-jsf","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:2.3.14-11.SP11_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-ironjacamar","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:1.5.26-2.Final_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-annotations","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-core","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-databind","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-jaxrs-providers","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-modules-base","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-modules-java8","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-remoting","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:5.0.31-3.SP2_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-server-migration","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:1.10.0-46.Final_redhat_00044.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-netty","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:4.1.135-1.Final_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-netty-transport-native-epoll","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:4.1.135-1.Final_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-picketlink-bindings","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:2.5.5-30.SP12_redhat_00020.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-picketlink-federation","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:2.5.5-24.SP12_redhat_00016.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-undertow","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:2.2.40-1.SP3_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"],"versions":[{"version":"0:7.4.25-2.GA_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-activemq-artemis","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:2.16.0-22.redhat_00057.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-glassfish-jsf","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:2.3.14-11.SP11_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-ironjacamar","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:1.5.26-2.Final_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-annotations","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-core","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-databind","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-jaxrs-providers","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-modules-base","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jackson-modules-java8","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:2.18.8-1.redhat_00003.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-remoting","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:5.0.31-3.SP2_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-server-migration","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:1.10.0-46.Final_redhat_00044.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-netty","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:4.1.135-1.Final_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-netty-transport-native-epoll","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:4.1.135-1.Final_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-picketlink-bindings","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:2.5.5-30.SP12_redhat_00020.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-picketlink-federation","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:2.5.5-24.SP12_redhat_00016.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-undertow","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:2.2.40-1.SP3_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"],"versions":[{"version":"0:7.4.25-2.GA_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform_xp:6.0"]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1.7.GA","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"io.netty/netty-handler","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform::el7"],"versions":[{"version":"4.1.135.Final-redhat-00001","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-eap-product-conf-parent","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el10"],"versions":[{"version":"0:801.7.1-1.GA_redhat_00001.1.el10eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-netty","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el10"],"versions":[{"version":"0:4.1.135-1.Final_redhat_00001.1.el10eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-netty-transport-native-epoll","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el10"],"versions":[{"version":"0:4.1.135-1.Final_redhat_00001.1.el10eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el10"],"versions":[{"version":"0:8.1.7.1-1.GA_redhat_00004.1.el10eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-eap-product-conf-parent","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"versions":[{"version":"0:801.7.1-1.GA_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-jose4j","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"versions":[{"version":"0:0.9.6-2.redhat_00002.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-netty","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"versions":[{"version":"0:4.1.135-1.Final_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-netty-transport-native-epoll","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"versions":[{"version":"0:4.1.135-1.Final_redhat_00001.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"],"versions":[{"version":"0:8.1.7.1-1.GA_redhat_00004.1.el8eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-eap-product-conf-parent","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"versions":[{"version":"0:801.7.1-1.GA_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-jose4j","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"versions":[{"version":"0:0.9.6-2.redhat_00002.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-netty","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"versions":[{"version":"0:4.1.135-1.Final_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-netty-transport-native-epoll","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"versions":[{"version":"0:4.1.135-1.Final_redhat_00001.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"],"versions":[{"version":"0:8.1.7.1-1.GA_redhat_00004.1.el9eap","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Streams for Apache Kafka 2.9.4","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:amq_streams:2.9::el9"]},{"vendor":"Red Hat","product":"Red Hat Offline Knowledge Portal 1.2.12","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"offline-knowledge-portal/rhokp-rhel9","cpes":["cpe:/a:redhat:offline_knowledge_portal:1.2::el9"],"versions":[{"version":"1782239370","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 2.25","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"rhoai/odh-trustyai-service-rhel9","cpes":["cpe:/a:redhat:openshift_ai:2.25::el9"],"versions":[{"version":"1788198681","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces 3.30","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"devspaces/openvsx-rhel9","cpes":["cpe:/a:redhat:openshift_devspaces:3.30::el9"],"versions":[{"version":"1787759145","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces 3.30","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"devspaces/pluginregistry-rhel9","cpes":["cpe:/a:redhat:openshift_devspaces:3.30::el9"],"versions":[{"version":"1787759723","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"OpenShift Serverless","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-serverless-1/kn-ekb-dispatcher-rhel9","cpes":["cpe:/a:redhat:serverless:1"]},{"vendor":"Red Hat","product":"OpenShift Serverless","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-serverless-1/kn-ekb-receiver-rhel9","cpes":["cpe:/a:redhat:serverless:1"]},{"vendor":"Red Hat","product":"OpenShift Serverless","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-serverless-1/kn-eventing-integrations-aws-ddb-streams-source-rhel9","cpes":["cpe:/a:redhat:serverless:1"]},{"vendor":"Red Hat","product":"OpenShift Serverless","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-serverless-1/kn-eventing-integrations-aws-s3-sink-rhel9","cpes":["cpe:/a:redhat:serverless:1"]},{"vendor":"Red Hat","product":"OpenShift Serverless","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-serverless-1/kn-eventing-integrations-aws-s3-source-rhel9","cpes":["cpe:/a:redhat:serverless:1"]},{"vendor":"Red Hat","product":"OpenShift Serverless","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-serverless-1/kn-eventing-integrations-aws-sns-sink-rhel9","cpes":["cpe:/a:redhat:serverless:1"]},{"vendor":"Red Hat","product":"OpenShift Serverless","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-serverless-1/kn-eventing-integrations-aws-sqs-sink-rhel9","cpes":["cpe:/a:redhat:serverless:1"]},{"vendor":"Red Hat","product":"OpenShift Serverless","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-serverless-1/kn-eventing-integrations-aws-sqs-source-rhel9","cpes":["cpe:/a:redhat:serverless:1"]},{"vendor":"Red Hat","product":"OpenShift Serverless","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-serverless-1/kn-eventing-integrations-log-sink-rhel9","cpes":["cpe:/a:redhat:serverless:1"]},{"vendor":"Red Hat","product":"OpenShift Serverless","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"openshift-serverless-1/kn-eventing-integrations-timer-source-rhel9","cpes":["cpe:/a:redhat:serverless:1"]},{"vendor":"Red Hat","product":"Red Hat AMQ Clients","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:amq_clients:2023"]},{"vendor":"Red Hat","product":"Red Hat build of Apache Camel 4 for Quarkus 3","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:camel_quarkus:3"]},{"vendor":"Red Hat","product":"Red Hat build of Apache Camel - HawtIO 4","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:apache_camel_hawtio:4"]},{"vendor":"Red Hat","product":"Red Hat build of Apicurio Registry 3","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:apicurio_registry:3"]},{"vendor":"Red Hat","product":"Red Hat build of Debezium 3","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:debezium:3"]},{"vendor":"Red Hat","product":"Red Hat Build of Keycloak","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:build_keycloak:"]},{"vendor":"Red Hat","product":"Red Hat Build of Keycloak","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhbk/keycloak-rhel9","cpes":["cpe:/a:redhat:build_keycloak:"]},{"vendor":"Red Hat","product":"Red Hat Build of Keycloak","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhbk/keycloak-rhel9-operator","cpes":["cpe:/a:redhat:build_keycloak:"]},{"vendor":"Red Hat","product":"Red Hat Build of Keycloak","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhbk-openshift-rhel9/rhbk-openshift-rhel9","cpes":["cpe:/a:redhat:build_keycloak:"]},{"vendor":"Red Hat","product":"Red Hat Build of Keycloak","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhbk-rhel9-operator/rhbk-rhel9-operator","cpes":["cpe:/a:redhat:build_keycloak:"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"bazel6","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"bazel7","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux AI (RHEL AI) 3","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"bazel8","cpes":["cpe:/a:redhat:enterprise_linux_ai:3"]},{"vendor":"Red Hat","product":"Red Hat Fuse 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:jboss_fuse:7"]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform Expansion Pack","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:jbosseapxp"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-modelmesh-rhel9","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-openvino-model-server-rhel9","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-spark-operator-rhel9","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-th06-cpu-torch210-py312-rhel9","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-th06-cpu-torch291-py312-rhel9","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-th06-cuda130-torch210-py312-rhel9","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-th06-cuda130-torch291-py312-rhel9","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI (RHOAI)","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rhoai/odh-th06-rocm64-torch291-py312-rhel9","cpes":["cpe:/a:redhat:openshift_ai"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"devspaces/jetbrains-ide-rhel9","cpes":["cpe:/a:redhat:openshift_devspaces:3"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"devspaces/multicluster-redirector-rhel9","cpes":["cpe:/a:redhat:openshift_devspaces:3"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Dev Spaces","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"devspaces/server-rhel9","cpes":["cpe:/a:redhat:openshift_devspaces:3"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"candlepin","cpes":["cpe:/a:redhat:satellite:6"]},{"vendor":"Red Hat","product":"Red Hat Satellite 6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"satellite:el8/candlepin","cpes":["cpe:/a:redhat:satellite:6"]},{"vendor":"Red Hat","product":"Red Hat Single Sign-On 7","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:red_hat_single_sign_on:7"]},{"vendor":"Red Hat","product":"streams for Apache Kafka 3","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"netty-handler","cpes":["cpe:/a:redhat:amq_streams:3"]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-12T16:38:52.451711Z","id":"CVE-2026-50010","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]},{"source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:*","versionEndExcluding":"4.1.135","matchCriteriaId":"3097D962-A32D-4467-AAE7-F4CBA3A349D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:*","versionStartIncluding":"4.2.0","versionEndExcluding":"4.2.15","matchCriteriaId":"413D4611-A46C-4BE4-AB2F-D86282F65984"}]}]}],"references":[{"url":"https://github.com/netty/netty/releases/tag/netty-4.1.135.Final","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/netty/netty/releases/tag/netty-4.2.15.Final","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9","source":"security-advisories@github.com","tags":["Vendor Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26017","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:26018","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:26586","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:28573","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:34608","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:37390","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:41951","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:48151","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:49700","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:49701","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:50085","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:53644","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:53645","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:53646","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:62260","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:65126","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:66488","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:66545","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/security/cve/CVE-2026-50010","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2488429","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50010.json","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}]}},{"cve":{"id":"CVE-2026-11999","sourceIdentifier":"facts@wolfssl.com","published":"2026-06-25T18:16:37.613","lastModified":"2026-06-26T16:50:28.077","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"X.509 trust-chain bypass (path-depth exhaustion) in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only builds with --enable-opensslextra whose application calls X509_verify_cert() with caller-supplied untrusted intermediates; for those users it is critical, otherwise the library is unaffected. Native wolfSSL TLS/DTLS usage is not impacted. X509_verify_cert() returned success based only on the last verified link rather than on reaching a trust anchor: when the supplied chain is deeper than the verifier's maximum path depth (default 100), path building runs out of depth while still walking untrusted intermediates and the chain is accepted even though it never reaches a configured trust anchor, allowing acceptance of an attacker-controlled certificate. The default TLS handshake (WOLFSSL_VERIFY_PEER) is not affected; only applications doing manual or deferred verification through this API are."}],"affected":[{"source":"facts@wolfssl.com","affectedData":[{"vendor":"wolfSSL","product":"wolfSSL","defaultStatus":"unaffected","collectionURL":"https://github.com/wolfSSL/wolfssl","versions":[{"version":"5.7.4","lessThanOrEqual":"5.9.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"facts@wolfssl.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-25T17:56:35.192208Z","id":"CVE-2026-11999","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"facts@wolfssl.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.4","versionEndExcluding":"5.9.2","matchCriteriaId":"B1EF9B6B-1F1B-485B-8B93-BC02295532E1"}]}]}],"references":[{"url":"https://github.com/wolfSSL/wolfssl/pull/10674","source":"facts@wolfssl.com","tags":["Issue Tracking","Patch"]},{"url":"https://www.wolfssl.com/docs/security-vulnerabilities/","source":"facts@wolfssl.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-55961","sourceIdentifier":"facts@wolfssl.com","published":"2026-06-25T18:16:41.213","lastModified":"2026-06-26T16:50:36.543","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"wolfSSL_PKCS7_verify() returning success for a degenerate (certs-only) PKCS#7 object that contains no signer. Such an object has empty signerInfos, so the underlying signed-data verification succeeds without authenticating any content. The compatibility-layer verify path now rejects the object when no signer signature has actually been verified, so a PKCS#7 carrying no valid signature is no longer reported as verified. This is enforced regardless of the PKCS7_NOVERIFY flag, which only suppresses signer certificate chain validation and was never intended to waive the requirement that a signature exist. Only affects OpenSSL compatibility builds that call the PKCS7_verify() compatibility API on potentially degenerate PKCS#7 bundles."}],"affected":[{"source":"facts@wolfssl.com","affectedData":[{"vendor":"wolfSSL","product":"wolfSSL","defaultStatus":"unaffected","collectionURL":"https://github.com/wolfSSL/wolfssl","versions":[{"version":"3.15.7","lessThanOrEqual":"5.9.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"facts@wolfssl.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-25T17:57:40.253830Z","id":"CVE-2026-55961","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"facts@wolfssl.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.15.7","versionEndExcluding":"5.9.2","matchCriteriaId":"DB9665B2-D168-40D1-AE48-038FFDAF4D0F"}]}]}],"references":[{"url":"https://github.com/wolfSSL/wolfssl/pull/10702","source":"facts@wolfssl.com","tags":["Issue Tracking","Patch"]},{"url":"https://www.wolfssl.com/docs/security-vulnerabilities/","source":"facts@wolfssl.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-6091","sourceIdentifier":"facts@wolfssl.com","published":"2026-06-25T18:16:41.447","lastModified":"2026-06-26T16:50:56.503","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Partial-chain certificate verification may accept chains that terminate at a peer-supplied, untrusted intermediate certificate rather than a trusted anchor. An attacker could present a chain that ends at an intermediate they control and have it accepted as valid. This affects the OpenSSL compatibility certificate-path-building path (wolfSSL_X509_verify_cert / X509_STORE, OPENSSL_EXTRA) when the X509_V_FLAG_PARTIAL_CHAIN verify flag is enabled."}],"affected":[{"source":"facts@wolfssl.com","affectedData":[{"vendor":"wolfSSL","product":"wolfSSL","defaultStatus":"unaffected","collectionURL":"https://github.com/wolfSSL/wolfssl","versions":[{"version":"5.7.4","lessThanOrEqual":"5.9.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"facts@wolfssl.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-25T17:58:24.366839Z","id":"CVE-2026-6091","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"facts@wolfssl.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.4","versionEndExcluding":"5.9.2","matchCriteriaId":"B1EF9B6B-1F1B-485B-8B93-BC02295532E1"}]}]}],"references":[{"url":"https://github.com/wolfSSL/wolfssl/pull/10170","source":"facts@wolfssl.com","tags":["Issue Tracking","Patch"]},{"url":"https://www.wolfssl.com/docs/security-vulnerabilities/","source":"facts@wolfssl.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-11310","sourceIdentifier":"facts@wolfssl.com","published":"2026-06-25T20:17:09.777","lastModified":"2026-06-26T18:54:51.247","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only builds with --enable-opensslextra (OPENSSL_EXTRA) and whose application validates certificates by calling X509_verify_cert() with caller-supplied untrusted intermediate certificates; for those users it is critical, otherwise the library is unaffected. In particular, native wolfSSL TLS/DTLS usage is not impacted. wolfSSL's X509_verify_cert() temporarily loads each caller-supplied untrusted intermediate into the certificate manager but failed to drop them before the trusted-store check, so an untrusted intermediate could anchor the path itself. An attacker can present a chain that never reaches a configured trust anchor and have it accepted, resulting in acceptance of an attacker-controlled certificate. This is certificate verification independent of TLS (e.g. S/MIME/CMS, code/firmware signing, JWT/JWS x5c), is not specific to any key type or algorithm, and a single untrusted intermediate suffices. The default wolfSSL TLS handshake (WOLFSSL_VERIFY_PEER) is not affected; only TLS applications doing manual or deferred peer verification through this API are, which also requires --enable-sessioncerts."}],"affected":[{"source":"facts@wolfssl.com","affectedData":[{"vendor":"wolfSSL","product":"wolfSSL","defaultStatus":"unaffected","collectionURL":"https://github.com/wolfSSL/wolfssl","versions":[{"version":"5.8.4","lessThanOrEqual":"5.9.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"facts@wolfssl.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-26T14:02:17.745614Z","id":"CVE-2026-11310","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"facts@wolfssl.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*","versionStartIncluding":"5.8.4","versionEndExcluding":"5.9.2","matchCriteriaId":"AF84F35E-F147-4E14-A18A-78A1FB159DCE"}]}]}],"references":[{"url":"https://github.com/wolfSSL/wolfssl/pull/10674","source":"facts@wolfssl.com","tags":["Issue Tracking","Patch"]},{"url":"https://www.wolfssl.com/docs/security-vulnerabilities/","source":"facts@wolfssl.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-55964","sourceIdentifier":"facts@wolfssl.com","published":"2026-06-25T20:17:16.817","lastModified":"2026-06-26T18:53:47.813","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA. Intermediate CA certificates are required to have the keyCertSign key usage when a Key Usage extension is present, but chain-supplied temporary CAs (WOLFSSL_TEMP_CA) added while building a certificate path were previously exempted from this check, so an intermediate asserting CA:TRUE but lacking keyCertSign was accepted as a signing CA. The check now applies to chain-supplied temporary CAs as well; only operator-loaded root certificates (WOLFSSL_USER_CA) and self-signed roots remain exempt. Per RFC 5280 an absent Key Usage extension implies all usages, so the requirement is enforced only when the extension is actually present (extKeyUsageSet). Affects the OpenSSL-compatibility certificate-path-building path (X509_verify_cert / X509_STORE, OPENSSL_EXTRA/OPENSSL_ALL), where untrusted chain intermediates are added as temporary CAs; native (non-OpenSSL-compat) certificate verification does not create temporary CAs and is unaffected. Within those builds, the check applies unless ALLOW_INVALID_CERTSIGN is defined."}],"affected":[{"source":"facts@wolfssl.com","affectedData":[{"vendor":"wolfSSL","product":"wolfSSL","defaultStatus":"unaffected","collectionURL":"https://github.com/wolfSSL/wolfssl","versions":[{"version":"5.7.4","lessThanOrEqual":"5.9.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"facts@wolfssl.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-26T13:56:12.832072Z","id":"CVE-2026-55964","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"facts@wolfssl.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*","versionStartIncluding":"5.7.4","versionEndExcluding":"5.9.2","matchCriteriaId":"B1EF9B6B-1F1B-485B-8B93-BC02295532E1"}]}]}],"references":[{"url":"https://github.com/wolfSSL/wolfssl/pull/10702","source":"facts@wolfssl.com","tags":["Issue Tracking","Patch"]},{"url":"https://www.wolfssl.com/docs/security-vulnerabilities/","source":"facts@wolfssl.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-6331","sourceIdentifier":"facts@wolfssl.com","published":"2026-06-25T22:17:03.010","lastModified":"2026-06-27T19:48:56.343","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"HMAC zero-length tag forgery in EVP_DigestVerifyFinal, where a zero-length tag could be accepted as valid during HMAC verification. In the OpenSSL-compatibility HMAC verify path the supplied signature length was only checked as not exceeding the MAC length, so a zero-length or otherwise truncated tag could pass verification. The fix requires the supplied tag length to exactly equal the MAC length and rejects a zero-length MAC, so a forged short or empty tag is no longer accepted."}],"affected":[{"source":"facts@wolfssl.com","affectedData":[{"vendor":"wolfSSL","product":"wolfSSL","defaultStatus":"unaffected","collectionURL":"https://github.com/wolfSSL/wolfssl","versions":[{"version":"3.15.5","lessThanOrEqual":"5.9.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"facts@wolfssl.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":2.1,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-26T13:52:52.624679Z","id":"CVE-2026-6331","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"facts@wolfssl.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.15.5","versionEndExcluding":"5.9.2","matchCriteriaId":"312E52DE-F4D7-452C-93DA-39B55AEE9314"}]}]}],"references":[{"url":"https://github.com/wolfSSL/wolfssl/pull/10192","source":"facts@wolfssl.com","tags":["Issue Tracking","Patch"]},{"url":"https://www.wolfssl.com/docs/security-vulnerabilities/","source":"facts@wolfssl.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-14355","sourceIdentifier":"security@php.net","published":"2026-07-03T21:16:55.783","lastModified":"2026-07-08T20:11:16.060","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw. The output buffer for the AES key-wrap-with-padding operation is sized from the plaintext length without accounting for RFC 5649 expansion. This may cause OpenSSL to write beyond allocated memory, corrupting heap metadata and triggering application abort."}],"affected":[{"source":"security@php.net","affectedData":[{"vendor":"php","product":"php","defaultStatus":"affected","collectionURL":"https://www.php.net/","packageName":"openssl","modules":["ext/openssl"],"versions":[{"version":"8.2.0","lessThan":"8.2.32","versionType":"semver","status":"affected"},{"version":"8.3.0","lessThan":"8.3.32","versionType":"semver","status":"affected"},{"version":"8.4.0","lessThan":"8.4.23","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThan":"8.5.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@php.net","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":5.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-06T13:57:51.767008Z","id":"CVE-2026-14355","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@php.net","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.2.32","matchCriteriaId":"84838FE7-7252-4A91-B533-6DF96F7638E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.0","versionEndExcluding":"8.3.32","matchCriteriaId":"BDE92322-4655-4D52-8130-0CEB76EE18B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.4.23","matchCriteriaId":"7069BD62-FE98-468E-8BBE-6EE4AAA1770E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndExcluding":"8.5.8","matchCriteriaId":"594B2AC2-D4EE-47A0-A522-F64240A10583"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*","matchCriteriaId":"46D69DCC-AE4D-4EA5-861C-D60951444C6C"}]}]}],"references":[{"url":"https://github.com/php/php-src/security/advisories/GHSA-7jrw-539f-x6vr","source":"security@php.net","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2026/07/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-45363","sourceIdentifier":"security-advisories@github.com","published":"2026-07-14T22:16:54.463","lastModified":"2026-10-24T22:10:00.210","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. Prior to 2.10.3 and 3.2.0, JWT.decode(token, '', true, algorithm: 'HS256') accepts an attacker-forged token because OpenSSL::HMAC.digest('SHA256', '', payload) returns a valid digest under an empty key and no empty-key precondition exists in the HMAC algorithm. The same path is reached when a keyfinder block or key_finder: argument returns an empty string, nil, or an array containing nil for an unknown key, affecting HS256, HS384, and HS512 verification through JWT.decode and JWT::EncodedToken#verify_signature!. This issue is fixed in versions 2.10.3 and 3.2.0."},{"lang":"es","value":"ruby-jwt es una implementación en Ruby del estándar RFC 7519 OAuth JSON Web Token. Antes de las versiones 2.10.3 y 3.2.0, JWT.decode(token, ’’, true, algorithm: ’HS256’) acepta un token forjado por un atacante porque OpenSSL::HMAC.digest(’SHA256’, ’’, payload) devuelve un digest válido con una clave vacía y no existe ninguna precondición de clave vacía en el algoritmo HMAC. Se alcanza la misma ruta cuando un bloque keyfinder o un argumento key_finder: devuelve una cadena vacía, nil, o un array que contiene nil para una clave desconocida, afectando la verificación de HS256, HS384 y HS512 a través de JWT.decode y JWT::EncodedToken#verify_signature!. Este problema está solucionado en las versiones 2.10.3 y 3.2.0."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"jwt","product":"ruby-jwt","versions":[{"version":"< 2.10.3","status":"affected"},{"version":">= 3.0.0, < 3.2.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-15T13:24:12.081532Z","id":"CVE-2026-45363","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"CWE-326"},{"lang":"en","value":"CWE-1391"}]}],"references":[{"url":"https://github.com/jwt/ruby-jwt/commit/9820020869ad147b941e49d96ab8beba35532964","source":"security-advisories@github.com"},{"url":"https://github.com/jwt/ruby-jwt/commit/db560b769a07bd9724e77ff505011ac01872106f","source":"security-advisories@github.com"},{"url":"https://github.com/jwt/ruby-jwt/releases/tag/v2.10.3","source":"security-advisories@github.com"},{"url":"https://github.com/jwt/ruby-jwt/releases/tag/v3.2.0","source":"security-advisories@github.com"},{"url":"https://github.com/jwt/ruby-jwt/security/advisories/GHSA-c32j-vqhx-rx3x","source":"security-advisories@github.com"},{"url":"https://lists.debian.org/debian-lts-announce/2026/09/msg00022.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2026-45784","sourceIdentifier":"security-advisories@github.com","published":"2026-07-17T21:17:06.503","lastModified":"2026-07-29T15:43:54.220","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipher_update_inplace in openssl/src/cipher_ctx.rs incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers EVP_aes_{128,192,256}_wrap_pad. For a non-multiple-of-8 input, OpenSSL writes up to 7 bytes past the end of the caller's buffer or Vec, producing attacker-controllable heap corruption when the plaintext length is attacker-influenced. This issue is fixed in version 0.10.80."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"rust-openssl","product":"rust-openssl","versions":[{"version":">= 0.10.50, < 0.10.80","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-20T13:49:44.811733Z","id":"CVE-2026-45784","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-131"},{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sfackler:openssl:*:*:*:*:*:rust:*:*","versionStartIncluding":"0.10.50","versionEndExcluding":"0.10.80","matchCriteriaId":"1B3F1265-1315-432A-9FE6-83CD5B4E4D69"}]}]}],"references":[{"url":"https://github.com/rust-openssl/rust-openssl/commit/19eceb26f2404aae187e5444e65c404ebc1348a7","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/rust-openssl/rust-openssl/pull/2638","source":"security-advisories@github.com","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/rust-openssl/rust-openssl/releases/tag/openssl-v0.10.80","source":"security-advisories@github.com","tags":["Product","Release Notes"]},{"url":"https://github.com/rust-openssl/rust-openssl/security/advisories/GHSA-phqj-4mhp-q6mq","source":"security-advisories@github.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-59847","sourceIdentifier":"secalert@redhat.com","published":"2026-07-21T14:16:34.657","lastModified":"2026-09-04T19:23:04.510","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"versions":[{"version":"0:0.12.0-3.el10_2","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"versions":[{"version":"0:0.9.6-17.el8_10","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"versions":[{"version":"0:0.9.6-17.el8_10","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"versions":[{"version":"0:0.10.4-19.el9_8","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"libssh","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"versions":[{"version":"0:0.10.4-19.el9_8","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"libssh-main","cpes":["cpe:/a:redhat:hummingbird:1"],"versions":[{"version":"0.12.1-4.hum1","lessThan":"*","versionType":"rpm","status":"unaffected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-21T14:03:33.644166Z","id":"CVE-2026-59847","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-253"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-1310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*","versionStartIncluding":"0.9.0","versionEndExcluding":"0.11.5","matchCriteriaId":"33F4F7FC-3E7C-4B01-8B94-DC16CDEA0696"},{"vulnerable":true,"criteria":"cpe:2.3:a:libssh:libssh:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"C250851D-1948-4012-ABE4-FEBB369E3231"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:*","matchCriteriaId":"87DEB507-5B64-47D7-9A50-3B87FD1E571F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"F4CFF558-3C47-480D-A2F0-BABF26042943"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"7F6FB57C-2BC7-487C-96DD-132683AEB35D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C"}]}]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:42922","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:55855","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:62217","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:62218","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-59847","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2498180","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-15981","sourceIdentifier":"security@wordfence.com","published":"2026-07-23T21:17:03.220","lastModified":"2026-07-24T23:16:50.257","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4. This is due to the mo_saml_validate_signature() function performing a loose boolean check on the raw tri-state integer returned by PHP's openssl_verify(), causing an error return value of -1 to be evaluated as truthy and therefore treated as a successful signature verification. This makes it possible for unauthenticated attackers to log in as any existing WordPress user, including administrators, by submitting a crafted SAMLResponse containing an attacker-controlled NameID and a deliberately malformed signature value that triggers an OpenSSL processing error — bypassing verification entirely and resulting in wp_set_auth_cookie() being called for the targeted account."}],"affected":[{"source":"security@wordfence.com","affectedData":[{"vendor":"cyberlord92","product":"SAML Single Sign On – SSO Login","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"5.4.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@wordfence.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-24T22:05:57.054951Z","id":"CVE-2026-15981","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@wordfence.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"references":[{"url":"https://plugins.trac.wordpress.org/browser/miniorange-saml-20-single-sign-on/tags/5.4.4/class-mo-saml-login-validate.php#L118","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/miniorange-saml-20-single-sign-on/tags/5.4.4/class-mo-saml-login-validate.php#L541","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/miniorange-saml-20-single-sign-on/tags/5.4.4/class-mo-saml-utilities.php#L403","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/miniorange-saml-20-single-sign-on/tags/5.4.4/includes/lib/SAML2Core/class-mo-saml-xml-security-dsig.php#L938","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/miniorange-saml-20-single-sign-on/tags/5.4.4/includes/lib/SAML2Core/class-mo-saml-xml-security-key.php#L621","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/changeset/3611421/miniorange-saml-20-single-sign-on","source":"security@wordfence.com"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b412f60f-61ea-47b1-a3ef-17275f7951df?source=cve","source":"security@wordfence.com"}]}},{"cve":{"id":"CVE-2026-59251","sourceIdentifier":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","published":"2026-07-27T16:18:03.517","lastModified":"2026-10-24T13:10:00.147","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake.\n\nDuring RFC 5280 policy processing in public_key:pkix_path_validation/3, the certificate policy tree maintained by pubkey_policy_tree grows without an upper bound. When a certificate chain contains M policies per certificate and K certificates, the tree grows on the order of M^K nodes because pubkey_policy_tree:add_leaves/2 and pubkey_policy_tree:add_leaf_siblings/2 extend the tree per policy per certificate. A modest chain with many policies per certificate is enough to pin BEAM schedulers and exhaust the node's memory, taking down the entire VM. The attacker only needs to be able to present a certificate chain to the victim, which is the normal precondition for a TLS handshake, so exploitation succeeds against any incoming or outgoing TLS connection that validates the peer's chain (the default for SSL/TLS clients and mutual-TLS servers).\n\nThis is the same vulnerability class as OpenSSL's X509_verify_cert policy tree DoS.\n\nThis vulnerability is associated with program files lib/public_key/src/pubkey_policy_tree.erl and program routines pubkey_policy_tree:add_leaves/2 and pubkey_policy_tree:add_leaf_siblings/2.\n\nThis issue affects OTP from OTP 26.2 before OTP 29.0.4, OTP 28.5.0.4 and OTP 27.3.4.15, corresponding to public_key from 1.15 before 1.21.4, 1.20.3.4 and 1.17.1.5."},{"lang":"es","value":"Asignación de recursos sin límites en la validación de ruta de certificado public_key de Erlang/OTP permite a un atacante remoto no autenticado causar denegación de servicio enviando una cadena de certificados X.509 manipulada durante el handshake TLS.\n\nDurante el procesamiento de políticas RFC 5280 en public_key:pkix_path_validation/3, el árbol de políticas de certificado mantenido por pubkey_policy_tree crece sin un límite superior. Cuando una cadena de certificados contiene M políticas por certificado y K certificados, el árbol crece en el orden de M^K nodos porque pubkey_policy_tree:add_leaves/2 y pubkey_policy_tree:add_leaf_siblings/2 extienden el árbol por política por certificado. Una cadena modesta con muchas políticas por certificado es suficiente para fijar los planificadores BEAM y agotar la memoria del nodo, derribando toda la VM. El atacante solo necesita poder presentar una cadena de certificados a la víctima, lo cual es la condición previa normal para un handshake TLS, por lo que la explotación tiene éxito contra cualquier conexión TLS entrante o saliente que valida la cadena del par (el valor predeterminado para clientes SSL/TLS y servidores mutual-TLS).\n\nEsta es la misma clase de vulnerabilidad que el DoS del árbol de políticas X509_verify_cert de OpenSSL.\n\nEsta vulnerabilidad está asociada con los archivos de programa lib/public_key/src/pubkey_policy_tree.erl y las rutinas de programa pubkey_policy_tree:add_leaves/2 y pubkey_policy_tree:add_leaf_siblings/2.\n\nEste problema afecta a OTP desde OTP 26.2 antes de OTP 29.0.4, OTP 28.5.0.4 y OTP 27.3.4.15, correspondiente a public_key desde 1.15 antes de 1.21.4, 1.20.3.4 y 1.17.1.5."}],"affected":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","affectedData":[{"vendor":"Erlang","product":"OTP","defaultStatus":"unaffected","packageName":"public_key","cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"modules":["pubkey_policy_tree"],"programFiles":["src/pubkey_policy_tree.erl"],"programRoutines":[{"name":"pubkey_policy_tree:add_leaves/2"},{"name":"pubkey_policy_tree:add_leaf_siblings/2"}],"repo":"https://github.com/erlang/otp","packageURL":"pkg:otp/public_key?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%20https:%2F%2Fgithub.com%2Ferlang%2Fotp.git","versions":[{"version":"1.15","lessThan":"*","versionType":"otp","status":"affected","changes":[{"at":"1.21.4","status":"unaffected"},{"at":"1.20.3.4","status":"unaffected"},{"at":"1.17.1.5","status":"unaffected"}]}]},{"vendor":"Erlang","product":"OTP","defaultStatus":"unaffected","collectionURL":"https://github.com","packageName":"erlang/otp","cpes":["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"],"modules":["pubkey_policy_tree"],"programFiles":["lib/public_key/src/pubkey_policy_tree.erl"],"programRoutines":[{"name":"pubkey_policy_tree:add_leaves/2"},{"name":"pubkey_policy_tree:add_leaf_siblings/2"}],"repo":"https://github.com/erlang/otp","packageURL":"pkg:github/erlang/otp","versions":[{"version":"26.2","lessThan":"*","versionType":"otp","status":"affected","changes":[{"at":"29.0.4","status":"unaffected"},{"at":"28.5.0.4","status":"unaffected"},{"at":"27.3.4.15","status":"unaffected"}]},{"version":"9d1dda7bad5a64b58c10a1554751689e94131a73","lessThan":"*","versionType":"git","status":"affected","changes":[{"at":"f8580fc117098c08165f46c26fd0750c5cfb2a90","status":"unaffected"},{"at":"f04c6bba38de1cf1b1836a7d9a9fbe239bd939e8","status":"unaffected"}]}]}]}],"metrics":{"cvssMetricV40":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-27T18:31:50.981990Z","id":"CVE-2026-59251","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*","versionStartIncluding":"26.2","versionEndExcluding":"27.3.4.15","matchCriteriaId":"066FEFFE-0F09-4E14-8E12-91C77C8AF3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*","versionStartIncluding":"28.0","versionEndExcluding":"28.5.0.4","matchCriteriaId":"E5A403B9-F8C0-42F9-9CDD-AE95FBBA58BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*","versionStartIncluding":"29.0","versionEndExcluding":"29.0.4","matchCriteriaId":"4325E198-43FA-4DD1-99A5-66705CF21615"},{"vulnerable":true,"criteria":"cpe:2.3:a:erlang:erlang\\/public_key:*:*:*:*:*:*:*:*","versionStartIncluding":"1.15","versionEndExcluding":"1.17.1.5","matchCriteriaId":"4A7632CA-8513-4465-BAFE-FD18F16B0845"},{"vulnerable":true,"criteria":"cpe:2.3:a:erlang:erlang\\/public_key:*:*:*:*:*:*:*:*","versionStartIncluding":"1.18","versionEndExcluding":"1.20.3.4","matchCriteriaId":"13F15795-8FBC-49F6-BFB7-D8E8971392AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:erlang:erlang\\/public_key:*:*:*:*:*:*:*:*","versionStartIncluding":"1.21","versionEndExcluding":"1.21.4","matchCriteriaId":"00074E99-F2EA-4695-A47B-DA8E76652508"}]}]}],"references":[{"url":"https://cna.erlef.org/cves/CVE-2026-59251.html","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/erlang/otp/commit/f04c6bba38de1cf1b1836a7d9a9fbe239bd939e8","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","tags":["Patch"]},{"url":"https://github.com/erlang/otp/commit/f8580fc117098c08165f46c26fd0750c5cfb2a90","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","tags":["Patch"]},{"url":"https://github.com/erlang/otp/security/advisories/GHSA-622p-qfh6-c352","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","tags":["Vendor Advisory"]},{"url":"https://osv.dev/vulnerability/EEF-CVE-2026-59251","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","tags":["Patch","Third Party Advisory"]},{"url":"https://www.erlang.org/doc/system/versions.html#order-of-versions","source":"6b3ad84c-e1a6-4bf7-a703-f496b71e49db","tags":["Release Notes"]}]}},{"cve":{"id":"CVE-2026-66402","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-01T13:16:57.487","lastModified":"2026-10-02T19:08:13.673","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity validation weaknesses in tls_verify_certificate(), tls_match_hostname(), and x509_utils_get_dns_names(). Because FreeRDP performs custom Common Name and DNS SAN string matching instead of using OpenSSL's length-aware identity validation APIs, it (1) truncates DNS SAN values at embedded NUL bytes (accepting e.g. 'victim.example\\0.attacker.example' as 'victim.example'), (2) accepts a matching Common Name even when non-matching DNS SAN entries are present, and (3) accepts IP-literal targets via DNS/CN matching without comparing iPAddress SANs. Under a trusted or misissued certificate chain, an attacker positioned to present such a certificate can bypass server identity verification, weakening TLS server authentication."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"FreeRDP","product":"FreeRDP","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"3.29.0","versionType":"semver","status":"affected"},{"version":"3.29.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-04T00:00:00+00:00","id":"CVE-2026-66402","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*","versionEndExcluding":"3.29.0","matchCriteriaId":"BEF953A8-09AB-44BA-8829-5E0E856E973E"}]}]}],"references":[{"url":"https://github.com/FreeRDP/FreeRDP/commit/b9533f07f98c25ed01c5f543b4d0ce73e120f5fd","source":"disclosure@vulncheck.com","tags":["Patch"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-43hh-p3vw-hfx3","source":"disclosure@vulncheck.com","tags":["Vendor Advisory","Exploit","Mitigation"]},{"url":"https://www.vulncheck.com/advisories/freerdp-before-tls-certificate-identity-validation-bypass","source":"disclosure@vulncheck.com","tags":["Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-67293","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-01T13:16:58.380","lastModified":"2026-09-29T16:17:25.597","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfreerdp/crypto/tls.c) treats a wildcard pattern such as *.example.com as matching any hostname ending in .example.com, so it incorrectly accepts a wildcard certificate for multi-label subdomains like a.b.example.com (which OpenSSL's X509_check_host() rejects). This weakens TLS server authentication under wildcard-certificate conditions."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"FreeRDP","product":"FreeRDP","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"3.29.0","versionType":"semver","status":"affected"},{"version":"3.29.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":4.2,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-05T03:56:12.911999Z","id":"CVE-2026-67293","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freerdp:freerdp:*:*:*:*:*:*:*:*","versionEndExcluding":"3.29.0","matchCriteriaId":"BEF953A8-09AB-44BA-8829-5E0E856E973E"}]}]}],"references":[{"url":"https://github.com/FreeRDP/FreeRDP/commit/f3b4347105114fe7453828736bea069999af319f","source":"disclosure@vulncheck.com","tags":["Patch"]},{"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5wr6-8m8j-3h7f","source":"disclosure@vulncheck.com","tags":["Exploit","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/freerdp-before-improper-certificate-hostname-validation","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-41447","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-03T21:16:38.947","lastModified":"2026-10-23T21:10:00.157","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FirmaCheck for Windows before 1.3.16 contains a DLL hijacking vulnerability that allows local attackers to execute arbitrary code by placing a crafted openssl.cnf file in the unvalidated C:\\Program Files (x86)\\Common Files\\SSL\\ directory path. Attackers can write a malicious OpenSSL configuration file referencing an attacker-controlled DLL to achieve code execution at startup process privilege level when FirmaCheck.exe runs automatically at system startup."},{"lang":"es","value":"FirmaCheck para Windows anterior a 1.3.16 contiene una vulnerabilidad de secuestro de DLL que permite a atacantes locales ejecutar código arbitrario al colocar un archivo openssl.cnf manipulado en la ruta de directorio no validada C:\\Program Files (x86)\\Common Files\\SSL\\. Los atacantes pueden escribir un archivo de configuración de OpenSSL malicioso que hace referencia a una DLL controlada por el atacante para lograr la ejecución de código a nivel de privilegio del proceso de inicio cuando FirmaCheck.exe se ejecuta automáticamente al inicio del sistema."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"Zucchetti S.p.a.","product":"FirmaCheck","defaultStatus":"affected","versions":[{"version":"0","lessThan":"1.3.16","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.5,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-04T13:43:43.367343Z","id":"CVE-2026-41447","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-426"}]}],"references":[{"url":"https://www.vulncheck.com/advisories/firmacheck-dll-hijacking-via-unvalidated-openssl-configuration-path","source":"disclosure@vulncheck.com"},{"url":"https://www.zucchetti.it/it/cms/soluzioni/gestione-documentale/firme-e-marche/software-gestione-firme-digitali-firmacheck/software-gratuito-gestione-firme-e-documenti-descrizione.html","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-69247","sourceIdentifier":"security-advisories@github.com","published":"2026-08-03T22:16:52.380","lastModified":"2026-10-23T21:10:00.157","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_decrypt_der, pkcs7_decrypt_pem, and pkcs7_decrypt_smime reported the outcome of decrypting a RecipientInfo's encryptedKey in several distinguishable ways, one of which disclosed the exact length recovered from the RSA operation. The same distinction was also observable by timing. An application that decrypts attacker-supplied EnvelopedData and reflects the outcome gives the attacker a Bleichenbacher oracle against the content-encryption key. Decryption ran as RSA PKCS#1 v1.5 decrypt of encryptedKey, build an AES cipher from the result, then AES-CBC decrypt and PKCS#7 unpad. Invalid RSA padding, a valid padding with a bad key length, a correct length with a wrong key, and the real key each failed or succeeded differently. Case 1 is reachable only where the linked library lacks implicit rejection: OpenSSL 3.0 and 3.1, LibreSSL, and BoringSSL. Exploitation requires a service that auto-decrypts untrusted EnvelopedData matching the victim certificate and answers adaptively at high volume, such as an S/MIME gateway or mail filter. This issue is fixed in 50.0.0."},{"lang":"es","value":"Criptografía es un paquete diseñado para exponer primitivas criptográficas y recetas a desarrolladores de Python. Desde la versión 44.0.0 hasta la 50.0.0, pkcs7_decrypt_der, pkcs7_decrypt_pem y pkcs7_decrypt_smime informaron el resultado del descifrado de la encryptedKey de un RecipientInfo de varias maneras distinguibles, una de las cuales reveló la longitud exacta recuperada de la operación RSA. La misma distinción también era observable por temporización. Una aplicación que descifra EnvelopedData suministrada por el atacante y refleja el resultado le da al atacante un oráculo de Bleichenbacher contra la clave de cifrado de contenido. El descifrado se ejecutó como descifrado RSA PKCS#1 v1.5 de encryptedKey, se construyó un cifrador AES a partir del resultado, luego descifrado AES-CBC y desacolchado PKCS#7. El relleno RSA inválido, un relleno válido con una longitud de clave incorrecta, una longitud correcta con una clave errónea y la clave real, cada uno falló o tuvo éxito de manera diferente. El Caso 1 es alcanzable solo donde la biblioteca enlazada carece de rechazo implícito: OpenSSL 3.0 y 3.1, LibreSSL y BoringSSL. La explotación requiere un servicio que descifra automáticamente EnvelopedData no confiable que coincida con el certificado de la víctima y responde de forma adaptativa a gran volumen, como una pasarela S/MIME o un filtro de correo. Este problema está solucionado en la versión 50.0.0."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"pyca","product":"cryptography","versions":[{"version":">= 44.0.0, < 50.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-04T14:09:18.204828Z","id":"CVE-2026-69247","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-208"},{"lang":"en","value":"CWE-209"}]}],"references":[{"url":"https://github.com/pyca/cryptography/commit/53fccd93413a8d7f07d6d8999681f27b75cffa3f","source":"security-advisories@github.com"},{"url":"https://github.com/pyca/cryptography/pull/15369","source":"security-advisories@github.com"},{"url":"https://github.com/pyca/cryptography/security/advisories/GHSA-g6cj-pr64-35w5","source":"security-advisories@github.com"}]}},{"cve":{"id":"CVE-2026-54876","sourceIdentifier":"openssl-security@openssl.org","published":"2026-08-05T15:16:53.487","lastModified":"2026-08-28T19:46:29.323","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A malicious TLS server can cause a memory leak in a TLS\nclient that has enabled OCSP response checking by sending an OCSP\nresponse that contains no single response entries.\n\nImpact summary: An attacker can leak an attacker-tunable amount of memory\nper TLS handshake in a victim client application. A long-running client\nthat repeatedly connects to a malicious server can have its memory\nexhausted, resulting in a Denial of Service.\n\nCWE: CWE-401: Missing Release of Memory after Effective Lifetime\n\nDescription: The affected function is called during X.509 certificate\nchain verification when OCSP response checking is enabled\nwith the X509_V_FLAG_OCSP_RESP_CHECK or X509_V_FLAG_OCSP_RESP_CHECK_ALL\nverification flags, for example when a TLS client verifies an OCSP\nresponse stapled into the TLS handshake by the server.\n\nWhen the received BasicOCSPResponse contains an empty SEQUENCE OF\nSingleResponse, which is permitted on the wire and accepted by the\nOpenSSL decoder, the OCSP_BASICRESP structure allocated by\nOCSP_response_get1_basic() was not freed because an early return\nbypassed the cleanup code at the end of the function.\n\nThe amount of memory leaked per handshake can be amplified by the\nattacker by padding the certs field of the BasicOCSPResponse with\nbogus certificates, which are parsed and stored in the leaked\nstructure before the empty response check triggers the early return.\nA long-running TLS client that repeatedly connects to a malicious\nserver can have its memory exhausted over time.\n\nOCSP response checking is not enabled by default. Only client\napplications that explicitly enable the OCSP response check\nverification flags are affected.\n\nFIPS impact: no\n\nThe FIPS modules in 4.0 and 3.6 are not affected by this issue as the\naffected code is outside the OpenSSL FIPS module boundary."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.4","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-05T19:31:37.065781Z","id":"CVE-2026-54876","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-401"}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/155b5fe0f93365e6df1c56ee3606b121080c6c12","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/d8c51048ac037a21bae0f41cad7a3920dc7f3638","source":"openssl-security@openssl.org"},{"url":"https://openssl-library.org/news/secadv/20260805.txt","source":"openssl-security@openssl.org"},{"url":"http://www.openwall.com/lists/oss-security/2026/08/05/8","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2026-73214","sourceIdentifier":"security-advisories@github.com","published":"2026-08-11T18:18:26.773","lastModified":"2026-09-09T20:55:04.493","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtls_server_input_handler() and create_new_connected_udp_socket() in src/apps/relay/dtls_listener.c retain OpenSSL dtls1_reassemble_fragment() state for a 35-byte fragmented ClientHello declaring a 650,000-byte handshake before cookie validation, allowing an unauthenticated remote sender using fresh UDP tuples to exhaust memory without TURN credentials, a completed handshake, a valid cookie, or source spoofing. This issue is fixed in version 4.16.0."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"coturn","product":"coturn","versions":[{"version":"< 4.16.0","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-12T22:07:47.118382Z","id":"CVE-2026-73214","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-400"},{"lang":"en","value":"CWE-770"}]}],"references":[{"url":"https://github.com/coturn/coturn/commit/37e13d1d60af8f1422c01b5e9f1c6bc355d03b85","source":"security-advisories@github.com"},{"url":"https://github.com/coturn/coturn/commit/beb4de9dcb6a475129595b943c9a34264420df09","source":"security-advisories@github.com"},{"url":"https://github.com/coturn/coturn/pull/2003","source":"security-advisories@github.com"},{"url":"https://github.com/coturn/coturn/pull/2012","source":"security-advisories@github.com"},{"url":"https://github.com/coturn/coturn/releases/tag/4.16.0","source":"security-advisories@github.com"},{"url":"https://github.com/coturn/coturn/security/advisories/GHSA-5x2p-4vqj-f6m4","source":"security-advisories@github.com"}]}},{"cve":{"id":"CVE-2026-14663","sourceIdentifier":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","published":"2026-08-13T13:17:43.700","lastModified":"2026-08-29T23:17:11.530","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext.  The OpenSSL version and OpenSSL configuration determine the disabled ciphers.  If the application accepts encrypted data as input, decryption will succeed even with the wrong key.  This in turn loses the modest protection from the Modification Detection Code (MDC).  Affected functions are pgp_sym_encrypt, pgp_sym_decrypt, pgp_pub_encrypt, pgp_pub_decrypt, pgp_sym_encrypt_bytea, pgp_sym_decrypt_bytea, pgp_pub_encrypt_bytea, and pgp_pub_decrypt_bytea.  Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected."}],"affected":[{"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","affectedData":[{"vendor":"n/a","product":"PostgreSQL","defaultStatus":"unaffected","versions":[{"version":"18","lessThan":"18.6","versionType":"rpm","status":"affected"},{"version":"17","lessThan":"17.11","versionType":"rpm","status":"affected"},{"version":"16","lessThan":"16.15","versionType":"rpm","status":"affected"},{"version":"15","lessThan":"15.19","versionType":"rpm","status":"affected"},{"version":"0","lessThan":"14.24","versionType":"rpm","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-13T14:55:07.618118Z","id":"CVE-2026-14663","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","type":"Secondary","description":[{"lang":"en","value":"CWE-313"},{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0","versionEndExcluding":"14.24","matchCriteriaId":"6BEE5714-C2EF-48DC-8613-C3EAA149E12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0","versionEndExcluding":"15.19","matchCriteriaId":"F433746A-733F-4ED0-9913-8AF69E0C8BF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"16.0","versionEndExcluding":"16.15","matchCriteriaId":"1996B91F-E0B2-4A78-8788-E17EA68D179C"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"17.0","versionEndExcluding":"17.11","matchCriteriaId":"3D04E642-71D7-4979-AA19-B9CCDEFD8C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","versionStartIncluding":"18.0","versionEndExcluding":"18.5","matchCriteriaId":"8494F67B-673A-4E1F-8F40-D24DCC1F8DA4"}]}]}],"references":[{"url":"https://www.postgresql.org/support/security/CVE-2026-14663/","source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-14456","sourceIdentifier":"openssl-security@openssl.org","published":"2026-08-13T15:19:31.820","lastModified":"2026-08-28T19:46:29.323","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.4","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-13T17:41:23.819585Z","id":"CVE-2026-14456","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b","source":"openssl-security@openssl.org"},{"url":"https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139","source":"openssl-security@openssl.org"},{"url":"https://openssl-library.org/news/secadv/20260813.txt","source":"openssl-security@openssl.org"},{"url":"http://www.openwall.com/lists/oss-security/2026/08/13/4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2026-74870","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:41.293","lastModified":"2026-09-03T16:07:10.300","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt (pip) versions <= 1.4.7 contain an information exposure vulnerability where the 'hsm fido2-test' and 'hsm onlykey-test' diagnostic commands unconditionally print the full derived hardware pepper as hex to stdout/stderr (crypt_cli.py, handle_hsm_command). The printed value can persist in terminal scrollback, session recordings, or CI logs. Impact is limited because the pepper is derived from a random per-invocation test salt and is salt-bound, so the leaked value cannot be used to decrypt real files. A related plugin issue logged raw prf_data outside the secret-redaction path. Fixed in 1.4.8 (and 1.5.0) by removing the hex dumps and routing plugin debug output through the redaction layer."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.8","versionType":"semver","status":"affected"},{"version":"1.4.8","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T15:15:31.287036Z","id":"CVE-2026-74870","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.7","matchCriteriaId":"F3610C62-791D-45CB-BD49-524EC24184F6"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-p9g8-wvh4-2jmx","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-hardware-pepper-information-disclosure","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74871","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:41.427","lastModified":"2026-09-10T16:56:31.877","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password cracking at SHA-256 speed instead of the configured KDF cost."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.6","versionType":"semver","status":"affected"},{"version":"1.4.6","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T17:35:23.785880Z","id":"CVE-2026-74871","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-916"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.6","matchCriteriaId":"3EA8DD97-CC47-494F-8F69-A37C1DB156E1"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-vxf9-vwp6-2w43","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-kdf-bypass-via-sequential-xor","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74872","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:41.560","lastModified":"2026-10-08T16:17:38.797","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity verification. Attackers can place malicious .so files matching the whirlpool*py313*.so pattern in site-packages directories to achieve native code execution when the module is loaded."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-18T14:35:28.607190Z","id":"CVE-2026-74872","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-426"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-j48q-4c78-rhf9","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-arbitrary-code-execution-via-whirlpool","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74873","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:41.690","lastModified":"2026-10-08T16:17:38.960","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/[pid]/cmdline to retrieve plaintext passwords and keystore passwords."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T14:35:09.250477Z","id":"CVE-2026-74873","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-214"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-h3m5-p59h-x88p","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-password-exposure-via-cli-argument","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74874","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:41.813","lastModified":"2026-10-08T16:17:39.117","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 use Python's non-cryptographic random module for steganographic pixel selection in the generate_pseudorandom_sequence function. Attackers who know the password can recover the Mersenne Twister state from approximately 624 outputs and predict pixel locations containing hidden data for extraction."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T15:44:44.405610Z","id":"CVE-2026-74874","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-338"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-vfgx-5q85-58q3","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-weak-prng-steganography-pixel-selection","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74875","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:41.943","lastModified":"2026-10-08T16:17:39.260","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema package or supply unknown metadata format versions to bypass all schema checks and process malicious data."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T15:14:54.956263Z","id":"CVE-2026-74875","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-425g-fjhq-5h92","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-schema-validation-bypass","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74876","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:42.073","lastModified":"2026-10-08T16:17:39.410","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.from_dict() that creates key bundles from untrusted data without verifying signatures. Attackers can call from_dict() followed by to_identity() without signature verification to encrypt data using attacker-controlled public keys, leaking secrets."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T15:41:56.272168Z","id":"CVE-2026-74876","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-8h88-gxp3-j7pg","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-unverified-key-bundle-encryption","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74877","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:42.203","lastModified":"2026-10-08T16:17:39.583","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain a missing ownership verification vulnerability in the revoke_key method that allows authenticated clients to revoke any other client's key. Attackers can revoke arbitrary keys by providing a valid ML-DSA signature, bypassing the intended ownership restriction."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-18T14:36:43.072806Z","id":"CVE-2026-74877","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-639"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-hvc7-763r-4f3h","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-missing-ownership-verification-via-revoke-key","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74878","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:42.330","lastModified":"2026-10-08T16:17:39.723","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is not shared across workers and is lost on server restart. Attackers can distribute authentication attempts across multiple server instances or retry immediately after a restart to bypass rate limiting protections."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T14:33:16.067320Z","id":"CVE-2026-74878","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-h45m-mgcp-q388","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-totp-rate-limiter-bypass","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74879","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:42.460","lastModified":"2026-10-08T16:17:39.860","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain an information disclosure vulnerability in the /ready endpoint that returns full database exception strings to unauthenticated callers. Attackers can trigger database errors to extract sensitive information including hostnames, IP addresses, connection parameters, and potentially credentials from exception messages."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T15:44:41.768802Z","id":"CVE-2026-74879","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-209"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-2vhw-q7vh-7xv2","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-information-disclosure-via-ready-endpoint","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74880","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:42.593","lastModified":"2026-10-24T13:10:00.147","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser history, and HTTP Referer headers to gain unauthorized access."},{"lang":"es","value":"Las versiones de openssl_encrypt anteriores a la 1.4.0 aceptan tokens de actualización como parámetros de consulta de URL en las rutas del servidor de claves y del servidor de telemetría. Los atacantes pueden extraer tokens de los registros del servidor, registros de proxy, historial del navegador y encabezados HTTP Referer para obtener acceso no autorizado."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T14:39:23.317665Z","id":"CVE-2026-74880","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-598"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-4rh7-jwg9-m28m","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-token-leakage-via-query-parameters","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74881","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:42.723","lastModified":"2026-10-08T16:17:40.163","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 configure CORS with allow_origins set to wildcard and allow_credentials enabled to true. Attackers can create malicious websites that make authenticated cross-origin requests to the API on behalf of any user who visits them."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.8}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T17:36:23.214727Z","id":"CVE-2026-74881","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-942"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-c65f-x25w-62jv","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-cors-misconfiguration-via-wildcard-origins","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74882","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:42.863","lastModified":"2026-08-31T15:49:27.530","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain an insecure default configuration that trusts the entire RFC 1918 private address space in IntegrityProxyConfig trusted_proxies. Attackers on private networks can forge client certificate headers to bypass mTLS authentication when ProxyAuth validation is relaxed or modified."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-18T14:37:24.226665Z","id":"CVE-2026-74882","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-2592-7m3g-7fq6","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-insecure-default-configuration","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74883","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:42.993","lastModified":"2026-09-01T15:27:18.940","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain a sandbox bypass vulnerability where the plugin sandbox fails to restrict alternative file access methods like pathlib.Path and io.open. Attackers can import pathlib or io modules to read and write arbitrary files, completely bypassing the restricted_open file access controls."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T12:49:10.718690Z","id":"CVE-2026-74883","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-693"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-mcjj-qw7m-j3cp","source":"disclosure@vulncheck.com","tags":["Exploit","Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-sandbox-bypass-via-pathlib-and-io","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]},{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-mcjj-qw7m-j3cp","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-74884","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:43.130","lastModified":"2026-09-01T15:27:11.257","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain a path traversal vulnerability in the _is_safe_path method where the plugin_id parameter is not sanitized before constructing the plugin config directory path. Attackers can declare a malicious plugin_id containing path traversal sequences like '../' to access arbitrary directories outside the intended plugin directory."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T15:44:39.513593Z","id":"CVE-2026-74884","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-73"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-8jpj-w975-rwv5","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-path-traversal-via-plugin-id","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74885","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:43.260","lastModified":"2026-09-01T15:27:00.460","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain a logging bug in restore_hidden_modules() that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another thread could re-import blocked modules in multi-threaded environments."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":3.6,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.0,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T14:42:34.579262Z","id":"CVE-2026-74885","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-117"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-43r4-3hf9-m84q","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-logging-bug-and-race-condition","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74886","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:43.390","lastModified":"2026-10-24T13:10:00.147","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than the AST analyzer's DANGEROUS_MODULES set. Attackers can bypass AST analysis through string obfuscation or encoding to import unblocked dangerous modules like sys, shutil, multiprocessing, importlib, and pickle for arbitrary code execution."},{"lang":"es","value":"Las versiones de openssl_encrypt anteriores a la 1.4.0 contienen una vulnerabilidad de omisión de sandbox de plugin donde el PluginImportGuard bloquea un conjunto diferente de módulos que el conjunto DANGEROUS_MODULES del analizador AST. Los atacantes pueden omitir el análisis AST mediante ofuscación o codificación de cadenas para importar módulos peligrosos no bloqueados como sys, shutil, multiprocessing, importlib y pickle para la ejecución de código arbitrario."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T15:23:52.639538Z","id":"CVE-2026-74886","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-184"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-9pgj-v69p-q586","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-plugin-import-guard-bypass","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74887","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:43.523","lastModified":"2026-08-31T15:49:13.423","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt before 1.4.0 imports Python's non-cryptographic 'random' module (Mersenne Twister PRNG) at line 15 of openssl_encrypt/modules/pqc.py. No direct calls to random.* were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that future code could inadvertently use random.randint() instead of a cryptographically secure alternative (secrets/os.urandom), producing predictable values since the Mersenne Twister state can be recovered from approximately 624 outputs. Fixed by removing the import in 1.4.0."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-18T14:38:11.935555Z","id":"CVE-2026-74887","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-338"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-cx72-m6xj-3vf6","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-insecure-random-import-in-pqc-module","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74888","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:43.653","lastModified":"2026-09-01T15:26:41.833","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 use a non-standard PBKDF2 key derivation construction with iterations=1 per call in an outer loop, creating a KDF whose security properties have not been formally analyzed. Attackers can exploit this weakened key derivation to more efficiently crack passwords protecting legacy encrypted files compared to standard PBKDF2 implementations."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T12:48:14.297282Z","id":"CVE-2026-74888","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-743f-89fg-x288","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-non-standard-pbkdf2-key-derivation","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74889","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:43.803","lastModified":"2026-09-01T15:26:32.637","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T16:00:53.861001Z","id":"CVE-2026-74889","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-j9mh-57cc-665x","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-weak-key-derivation-via-hkdf","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74890","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:43.960","lastModified":"2026-10-24T13:10:00.147","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTEST_CURRENT_TEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticated ciphertext and bypass integrity protection on encrypted data."},{"lang":"es","value":"Las versiones de openssl_encrypt anteriores a 1.4.0 contienen una vulnerabilidad de omisión de autenticación en CamelliaCipher que deshabilita la generación y verificación de etiquetas HMAC cuando la variable de entorno PYTEST_CURRENT_TEST está configurada. Atacantes con ejecución de código pueden configurar esta variable de entorno para producir texto cifrado no autenticado y omitir la protección de integridad en los datos cifrados."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T14:43:16.629569Z","id":"CVE-2026-74890","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-rvc2-5jxq-gpcj","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-hmac-authentication-bypass-via-environment-variable","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74891","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:44.120","lastModified":"2026-09-01T15:25:29.160","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-known default credentials to retrieve sensitive data."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T15:30:14.388444Z","id":"CVE-2026-74891","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-v4vm-4xf2-fhqj","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-hardcoded-database-credentials","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74892","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:44.263","lastModified":"2026-10-24T13:10:00.147","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication."},{"lang":"es","value":"Las versiones de openssl_encrypt anteriores a la 1.4.0 contienen una clave secreta predeterminada codificada en la configuración del servidor de telemetría independiente que se utiliza para el hashing de claves API. Los atacantes que conocen este valor predeterminado pueden predecir o falsificar hashes de claves API para comprometer la autenticación de la API de telemetría."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-18T14:39:31.354253Z","id":"CVE-2026-74892","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-p926-6hjp-w9jw","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-hardcoded-secret-key","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74893","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:44.397","lastModified":"2026-09-01T15:25:14.313","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain hardcoded default JWT signing secrets in config.py that pass validation checks. Attackers with access to source code can forge valid JWT tokens for any client_id to gain authenticated access to keyserver and telemetry APIs."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T12:47:31.348653Z","id":"CVE-2026-74893","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-qc6h-gfjh-7qqg","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-jwt-token-forgery-via-hardcoded-secrets","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74894","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:44.523","lastModified":"2026-09-01T15:25:06.733","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt before 1.4.0 contains an authentication bypass vulnerability in the verify_api_token function that accepts any non-empty Bearer token string without validation. Attackers can upload arbitrary public keys, enumerate all keys, and revoke keys belonging to any user by providing any Bearer token in the Authorization header."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T16:00:51.628767Z","id":"CVE-2026-74894","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-4g2c-wpgj-49w8","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-authentication-bypass-via-bearer-token","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74895","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:44.653","lastModified":"2026-09-01T15:24:59.647","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with unrestricted access to the filesystem, network, subprocess execution, and all Python modules."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T14:43:59.273568Z","id":"CVE-2026-74895","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-693"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-623h-chj7-hfx8","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-plugin-sandbox-bypass-via-process-isolation","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74896","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:44.787","lastModified":"2026-09-01T15:24:52.323","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in the DangerousPatternVisitor AST analyzer that fails to detect dunder attribute traversal techniques. Attackers can use __class__, __bases__, __subclasses__(), and __globals__ chains to access restricted functions and execute arbitrary system commands from plugin code."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T15:10:24.867427Z","id":"CVE-2026-74896","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-693"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-w7gr-9g4g-33mx","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-sandbox-escape-via-dunder-attribute-traversal","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]},{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-w7gr-9g4g-33mx","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-74899","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:44.917","lastModified":"2026-08-28T18:34:48.753","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec() builtins. Attackers can traverse the Python class hierarchy via __class__.__mro__.__subclasses__() to access system functions and execute arbitrary OS commands."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-18T14:40:11.591350Z","id":"CVE-2026-74899","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-95"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-m25m-ggxg-239c","source":"disclosure@vulncheck.com","tags":["Exploit","Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-sandbox-escape-via-type-hierarchy","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]},{"url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-43jx-gxq4-jpjc","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2026-74900","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:45.050","lastModified":"2026-09-01T15:24:43.217","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret from only 16 bytes of the private key and publicly available encapsulated key data. Attackers who obtain 16 bytes of the private key can compute the shared secret and decrypt all ciphertext, as the fallback triggers on any KEM failure without raising an error."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T12:46:53.410833Z","id":"CVE-2026-74900","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-391"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-p3gq-pcg9-qvfv","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-weak-shared-secret-via-pqc-simulation-mode","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-74901","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-17T11:16:45.183","lastModified":"2026-09-01T16:08:27.007","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without detection."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.0","versionType":"semver","status":"affected"},{"version":"1.4.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-17T16:00:48.847551Z","id":"CVE-2026-74901","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.0","matchCriteriaId":"A36F4452-E3EE-4AB3-946E-C4B923C22C70"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-w4j7-wfgw-r52w","source":"disclosure@vulncheck.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-authentication-bypass-via-aes-ctr-fallback","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-59825","sourceIdentifier":"security-advisories@github.com","published":"2026-08-18T15:16:55.623","lastModified":"2026-09-16T13:42:44.293","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.19 and from 4.5.0 until 4.5.12, Mastodon's app/models/concerns/user/ldap_authenticable.rb mutates OpenSSL::SSL::SSLContext::DEFAULT_PARAMS when LDAP authentication uses LDAP_TLS_NO_VERIFY=true, disabling SSL and TLS certificate verification globally for requests made by puma web processes while sidekiq background jobs remain unaffected. This issue is fixed in versions 4.4.19 and 4.5.12."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"mastodon","product":"mastodon","versions":[{"version":"< 4.4.19","status":"affected"},{"version":">= 4.5.0, < 4.5.12","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-18T15:51:09.488217Z","id":"CVE-2026-59825","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"references":[{"url":"https://github.com/mastodon/mastodon/commit/2ccb6ef277e725d1932295690cf8ab9d3dc03149","source":"security-advisories@github.com"},{"url":"https://github.com/mastodon/mastodon/commit/5748d0b16ea09001e0933f76c7afe814e09652ef","source":"security-advisories@github.com"},{"url":"https://github.com/mastodon/mastodon/commit/761c61b42590a2fd91442fc15a0a7583e48bbea4","source":"security-advisories@github.com"},{"url":"https://github.com/mastodon/mastodon/pull/39571","source":"security-advisories@github.com"},{"url":"https://github.com/mastodon/mastodon/releases/tag/v4.4.19","source":"security-advisories@github.com"},{"url":"https://github.com/mastodon/mastodon/releases/tag/v4.5.12","source":"security-advisories@github.com"},{"url":"https://github.com/mastodon/mastodon/security/advisories/GHSA-3rhr-8phh-jm86","source":"security-advisories@github.com"}]}},{"cve":{"id":"CVE-2026-53583","sourceIdentifier":"security-advisories@github.com","published":"2026-08-20T19:16:54.500","lastModified":"2026-10-26T10:10:00.140","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verify_server_cert in src/libgit2/streams/openssl.c uses an inverted !!memcmp result in the GEN_IPADD branch when comparing an IP-literal host with a certificate IP SubjectAltName. OpenSSL builds reject matching IP addresses and accept mismatched IP addresses, allowing a network attacker with a CA-trusted certificate containing any IP SubjectAltName to intercept libgit2 connections to IP-literal HTTPS URLs. DNS SubjectAltName validation and non-OpenSSL TLS backends are not affected. This issue is fixed in versions 1.8.6 and 1.9.5."},{"lang":"es","value":"libgit2 es una implementación portátil en C de los métodos centrales de Git proporcionada como una biblioteca enlazable con una API sólida, permitiendo integrar la funcionalidad de Git en su aplicación. Antes de 1.8.6 y 1.9.5, verify_server_cert en src/libgit2/streams/openssl.c usa un resultado !!memcmp invertido en la rama GEN_IPADD al comparar un host literal de IP con un SubjectAltName de IP de certificado. Las compilaciones de OpenSSL rechazan las direcciones IP coincidentes y aceptan las direcciones IP no coincidentes, permitiendo a un atacante de red con un certificado de confianza de CA que contenga cualquier SubjectAltName de IP interceptar conexiones de libgit2 a URLs HTTPS literales de IP. La validación de DNS SubjectAltName y los backends TLS que no son de OpenSSL no se ven afectados. Este problema está solucionado en las versiones 1.8.6 y 1.9.5."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"libgit2","product":"libgit2","versions":[{"version":"< 1.8.6","status":"affected"},{"version":">= 1.9.0, < 1.9.5","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-20T19:03:44.491440Z","id":"CVE-2026-53583","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Primary","description":[{"lang":"en","value":"CWE-295"},{"lang":"en","value":"CWE-297"}]}],"references":[{"url":"https://github.com/libgit2/libgit2/commit/647dcb432980b84ede4cb5a008bbd1ccb4ead03d","source":"security-advisories@github.com"},{"url":"https://github.com/libgit2/libgit2/commit/c2aa35409ee0e6515df64da49750f13a0a42c47f","source":"security-advisories@github.com"},{"url":"https://github.com/libgit2/libgit2/commit/ef086bc3e4eedf62be38a910381aae24d49871ff","source":"security-advisories@github.com"},{"url":"https://github.com/libgit2/libgit2/releases/tag/v1.8.6","source":"security-advisories@github.com"},{"url":"https://github.com/libgit2/libgit2/releases/tag/v1.9.5","source":"security-advisories@github.com"},{"url":"https://github.com/libgit2/libgit2/security/advisories/GHSA-h7gc-w2gg-p9xp","source":"security-advisories@github.com"},{"url":"https://github.com/libgit2/libgit2/security/advisories/GHSA-h7gc-w2gg-p9xp","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2026-62243","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-22T13:16:39.687","lastModified":"2026-10-14T19:10:00.297","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain (non-extended) X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable (Java 25+). In this configuration the OpenSSL client does not perform hostname verification, allowing a man-in-the-middle attacker to present a certificate issued for a different hostname that is accepted without validation. Fixed in 4.2.17.Final and 4.1.137.Final."},{"lang":"es","value":"Netty (io.netty:netty-handler) versiones desde 4.2.0.Final hasta 4.2.16.Final y versiones hasta 4.1.136.Final deshabilitan la verificación de nombre de host TLS en la ruta del cliente SslProvider.OPENSSL cuando se utiliza un X509TrustManager simple (no extendido) y el encapsulamiento del gestor de confianza basado en Unsafe no está disponible (Java 25+). En esta configuración, el cliente OpenSSL no realiza la verificación de nombre de host, permitiendo a un atacante man-in-the-middle presentar un certificado emitido para un nombre de host diferente que es aceptado sin validación. Corregido en 4.2.17.Final y 4.1.137.Final."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"netty","product":"netty","defaultStatus":"unaffected","packageURL":"pkg:maven/io.netty/netty-handler","versions":[{"version":"4.2.0.Final","lessThan":"4.2.16.Final","versionType":"custom","status":"affected"},{"version":"4.2.16.Final","versionType":"custom","status":"unaffected"}]},{"vendor":"netty","product":"netty","defaultStatus":"unaffected","packageURL":"pkg:maven/io.netty/netty-handler","versions":[{"version":"0","lessThan":"4.1.137.Final","versionType":"custom","status":"affected"},{"version":"4.1.137.Final","versionType":"custom","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-24T19:36:11.866196Z","id":"CVE-2026-62243","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-297"}]}],"references":[{"url":"https://github.com/netty/netty/security/advisories/GHSA-p85m-gvr3-788c","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/netty-through-tls-hostname-verification-bypass","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-77131","sourceIdentifier":"f4fb688c-4412-4426-b4b8-421ecf27b14a","published":"2026-08-25T09:17:33.527","lastModified":"2026-08-26T17:13:53.420","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key."}],"affected":[{"source":"f4fb688c-4412-4426-b4b8-421ecf27b14a","affectedData":[{"vendor":"TYPO3","product":"Extension \"SYSSY - TYPO3 Monitoring & Security Checks\"","defaultStatus":"unaffected","collectionURL":"https://packagist.org/","packageName":"syssy/syssy-typo3-extension","versions":[{"version":"0","lessThan":"3.0.6","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"f4fb688c-4412-4426-b4b8-421ecf27b14a","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-25T14:41:34.298786Z","id":"CVE-2026-77131","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"f4fb688c-4412-4426-b4b8-421ecf27b14a","type":"Secondary","description":[{"lang":"en","value":"CWE-319"}]}],"references":[{"url":"https://typo3.org/security/advisory/typo3-ext-sa-2026-015","source":"f4fb688c-4412-4426-b4b8-421ecf27b14a"}]}},{"cve":{"id":"CVE-2026-14457","sourceIdentifier":"openssl-security@openssl.org","published":"2026-08-25T13:17:49.533","lastModified":"2026-09-11T21:14:35.873","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs)\nenabled, and only the private key (with no associated certificate) configured locally,\na NULL pointer dereference may occur when the remote peer solicits raw public keys and\nalso sends the typically omitted \"signature_algorithms_cert\" TLS extension.\n\nImpact summary: The impact is limited to a possible Denial of Service as a result of\nan application abort, no data disclosure or remote command execution are possible.\n\nCWE: CWE-476: NULL Pointer Dereference\n\nDescription: While a passing comment in sample code in the documentation suggests\nthat key-only RPK configurations are supported, the best-practice RPK configuration\nis to always configure a corresponding certificate (possibly self-signed or\nsigned by any convenient CA).\n\nWhen the private key is configured along with a matching certificate, the\n\"signature_algorithms_cert\" extension is handled reliably even without the\nfix, and peer clients or servers that don't support raw public keys may be\nable to complete a TLS connection by pinning or verifying the corresponding\ncertificate or its public key.\n\nDeployments that prefer to configure just a private key with no certificate\nneed to upgrade to an updated release as noted below.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue, as the SSL protocol implementation\nis outside the OpenSSL FIPS module boundary."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.4","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.8","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-25T14:13:25.034178Z","id":"CVE-2026-14457","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.7","matchCriteriaId":"216D6529-561A-4684-A886-50954FBEBFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.8","matchCriteriaId":"C5BB9E95-09B6-4163-B51C-D62B528A04DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.4","matchCriteriaId":"B1416826-F2F1-4EA8-9FB2-A56B0DA923C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.2","matchCriteriaId":"63B8F45B-E44F-481C-815D-AF9CA89C48F6"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/581aaa0f0a35d214740f0fe1f5283ec41f1212e1","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/d0af20478688a6aa2f59d61caa3f82136b181d7f","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/dad836b071da6579510c968615848ba03cac593b","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260825.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-18798","sourceIdentifier":"openssl-security@openssl.org","published":"2026-08-25T13:17:49.813","lastModified":"2026-09-23T16:07:09.323","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: QUIC server may double free QRX (QUIC record layer RX) object\nwhen channel creation fails for initial packet.\n\nImpact summary: Double free leads to heap corruption, which typically results in \ntermination of QUIC server process, leading to Denial of Service. There is so\nfar no evidence that this double free is exploitable for remote code execution,\nthus it is considered highly improbable.\n\nCWE: CWE-415: Double Free\n\nDescription: In order to validate initial packet, OpenSSL QUIC stack default\npacket handler (port_default_packet_handler()) creates a so-called QRX object.\nIf the initial packet validates successfully with QRX object, the default packet\nhandler proceeds to channel (connection object) creation. The QRX object used\nfor packet validation is passed to port_bind_channel(), so it becomes part of\nthe newly created connection. If port_bind_channel() fails, then it also frees\nthe QRX object. Once port_bind_channel() returns, the port_default_packet_handler()\ndetects the failure and proceeds to the error branch, where the same QRX object is\nfreed for the second time.\n\nThe failure in port_bind_channel() function can be induced with a relatively\nlow effort by a malformed (non RFC 9000 compliant) INITIAL packet. If the packet\ncarries DCID (destination connection ID) which is shorter than 8 bytes, then\nport_bind_channel() jumps to the error path after ossl_quic_lcidm_enrol_odcid()\ndetects that the DCID has invalid length.\n\nFIPS impact: no\nThe FIPS module is not affected, as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.4","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-25T14:15:00.501697Z","id":"CVE-2026-18798","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.8","matchCriteriaId":"C5BB9E95-09B6-4163-B51C-D62B528A04DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.4","matchCriteriaId":"B1416826-F2F1-4EA8-9FB2-A56B0DA923C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.2","matchCriteriaId":"63B8F45B-E44F-481C-815D-AF9CA89C48F6"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/967582d5037f01a26b6d19beae19af62a1b15c3c","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a14a1deac403522fbeafabcb198503cf6caa7dc4","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260825.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-54874","sourceIdentifier":"openssl-security@openssl.org","published":"2026-08-25T13:19:24.033","lastModified":"2026-09-11T21:16:28.067","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Receiving a DTLS record for a future epoch while a handshake\nis in progress causes OpenSSL to buffer far more memory than the record\nitself requires.\n\nImpact summary: A peer can use a small amount of network traffic to make an\nOpenSSL DTLS endpoint retain a disproportionately large amount of memory,\nwhich may lead to a Denial of Service.\n\nCWE: CWE-405: Asymmetric Resource Consumption (Amplification)\n\nDescription: While a DTLS handshake is in progress, a peer may legitimately\nhave already moved on to the next epoch (for example, having sent its\nChangeCipherSpec and Finished messages) before the local endpoint has\nprocessed the same transition, typically because of reordering on the\nunderlying UDP transport. OpenSSL buffers such early records so that they\ncan be processed once the local endpoint catches up.\n\nBuffering a record currently retains the entire read buffer it arrived in,\nwhich is sized to hold the largest possible DTLS record (around 16\nkilobytes), rather than just the bytes that make up the record itself. Up\nto 100 such records may be buffered per connection. As a result, a peer\nthat sends a stream of small forged records claiming to belong to the next\nepoch can cause an OpenSSL DTLS endpoint to retain around 1.7 megabytes of\nmemory, despite sending only a small fraction of that amount of data over\nthe network.\n\nAn attacker therefore gains a memory amplification factor of around 1200,\nand can multiply the effect across as many associations as it is able to\nopen, making this a remote memory exhaustion Denial of Service risk for\nDTLS servers. Since the memory retained per connection remains bounded,\nand any limit an application already places on the number of concurrent\nassociations also bounds the total exposure, this issue has been assessed\nas Low severity.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary.\n\nOpenSSL 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are vulnerable to this\nissue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.2.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.4.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.8.\nOpenSSL 3.4 users should upgrade to OpenSSL 3.4.7.\nOpenSSL 3.0 users should upgrade to OpenSSL 3.0.22.\n\nPremium support customers only:\nOpenSSL 1.1.1 users should upgrade to OpenSSL 1.1.1zi\nOpenSSL 1.0.2 users should upgrade to OpenSSL 1.0.2zr\n\nThis issue was reported on 18 May 2026 by Amazon Web Services.\nThe fix has been developed by Matt Caswell.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Amazon Web Services\nFixed by: Matt Caswell"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.4","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.8","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.7","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.22","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1zi","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zr","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-25T14:28:32.620361Z","id":"CVE-2026-54874","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-405"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zr","matchCriteriaId":"8A8F4866-CC7C-45E3-B948-36BD27AF27F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1zi","matchCriteriaId":"9AA53F3B-CD64-44C4-B97F-47F8E7638904"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.22","matchCriteriaId":"5DAAFBD8-3DEE-4F6B-8D83-02966005168A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.7","matchCriteriaId":"216D6529-561A-4684-A886-50954FBEBFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.8","matchCriteriaId":"C5BB9E95-09B6-4163-B51C-D62B528A04DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.4","matchCriteriaId":"B1416826-F2F1-4EA8-9FB2-A56B0DA923C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.2","matchCriteriaId":"63B8F45B-E44F-481C-815D-AF9CA89C48F6"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/4808b5d64176451f3d93d87d0ac9c81a9b13fb23","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/cc0c6710917cd5eec001b297355d2ba723505107","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/f52ffc11b90737ac89083909618dc2e1f42c561c","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260825.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-63072","sourceIdentifier":"openssl-security@openssl.org","published":"2026-08-25T13:19:26.010","lastModified":"2026-09-11T21:16:34.287","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based\non querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive\ncan write and cleanse more bytes than that query reports, causing an 8-byte\nout-of-bounds heap write.\n\nImpact summary: An attacker who supplies a crafted CMS message can trigger a\ndeterministic 8-byte out-of-bounds heap write when the victim decrypts it\nwith CMS_decrypt(), corrupting the heap and typically resulting in a Denial\nof Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: The key-wrap OID is potentially attacker-controlled on the wire.\nCMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers.\nAn attacker can take a legitimate message and change a single OID byte to\nselect the padded variant while leaving the message otherwise valid. Since\nthe unwrap key is derived from the recipient's private operation (ECDH key\nagreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot\npass, and the decryption fails with integrity failure.\n\nThe write is a fixed-size (8-byte), fixed-value (zero) heap overflow\nimmediately past the allocation, requires no special configuration, and is\nreachable from the public CMS_decrypt() function. The consequence is\na heap corruption leading to a Denial of Service. The fix in the CMS code\nsizes the unwrap output buffer for the worst case so a failed unwrap cannot\nwrite past the allocation.\n\nFIPS impact: no\n\nAs the CMS code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.4","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.8","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.7","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.22","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1zi","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-25T14:29:50.344129Z","id":"CVE-2026-63072","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.22","matchCriteriaId":"5DAAFBD8-3DEE-4F6B-8D83-02966005168A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.7","matchCriteriaId":"216D6529-561A-4684-A886-50954FBEBFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.8","matchCriteriaId":"C5BB9E95-09B6-4163-B51C-D62B528A04DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.4","matchCriteriaId":"B1416826-F2F1-4EA8-9FB2-A56B0DA923C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.2","matchCriteriaId":"63B8F45B-E44F-481C-815D-AF9CA89C48F6"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/87784ad619af36b8807c2044b3940006fccc1e42","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/9530a5fd1aacaeccdced4478ea2340a480613335","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/9ec2f6d2ae2bcad907cf7ee38584855bafe4979a","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260825.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-63073","sourceIdentifier":"openssl-security@openssl.org","published":"2026-08-25T13:19:26.147","lastModified":"2026-09-11T21:16:45.633","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: OpenSSL CMP response validation passed an unexpected response\nsender distinguished name directly as the format string to `ERR_raise_data()`.\n\nImpact summary: A malicious or intercepted CMP endpoint can crash a CMP client\nthat enforces an expected sender or uses a pinned server certificate whose\nsubject becomes the default expected sender.\n\nCWE: CWE-134 (Use of Externally-Controlled Format String)\n\nDescription: When validating a received CMP message, ossl_cmp_msg_check_update()\nconverts the peer-supplied sender distinguished name with X509_NAME_oneline()\nand passes it directly as the format argument to ERR_raise_data(). Percent\ncharacters survive the conversion, so a sender DN such as \"CN=%s%n\" reaches\nBIO_vsnprintf() as an attacker-controlled format string with no matching variadic\narguments. This path is only reached when the caller configures an expected\nsender or pins a server certificate, which is the normal configuration for a\nCMP client validating server responses.\n\nSince the attacker controls the format string but none of the variadic\narguments, such specifiers as %s and %n dereference or write through unrelated\nstack contents and crash the client. The reliable consequence is a denial of\nservice, when the response comes from a malicious or intercepted CMP endpoint.\nThere is no controlled memory write, arbitrary-address read, or reliable path\nto remote code execution.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue, as the CMP protocol\nimplementation is outside the OpenSSL FIPS module boundary."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.4","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.8","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-31T19:12:48.434586Z","id":"CVE-2026-63073","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.7","matchCriteriaId":"216D6529-561A-4684-A886-50954FBEBFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.8","matchCriteriaId":"C5BB9E95-09B6-4163-B51C-D62B528A04DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.4","matchCriteriaId":"B1416826-F2F1-4EA8-9FB2-A56B0DA923C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.2","matchCriteriaId":"63B8F45B-E44F-481C-815D-AF9CA89C48F6"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/0cc20b322639919aa423e90799d9a57c3b4b76ca","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/6a0acc072b4d37a7cac1252a29c1ce1f00c5ec29","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7eb2e3ec9d1d4f35c8022fccd4b03398b3f33e21","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260825.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-63074","sourceIdentifier":"openssl-security@openssl.org","published":"2026-08-25T13:19:26.283","lastModified":"2026-09-11T21:16:58.127","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches\nadditional certificates (extraCerts) sent in a CMP message, but never expunges\nthem (for instance if they are invalid).  If a server reuses an OSSL_CMP_CTX\nfrequently, this cache of extraCerts may grow unboundedly, and a malicious\nclient may flood a CMP server with requests driving this growth.\n\nImpact summary: Users utilizing a CMP server that reuses a single OSSL_CMP_CTX\nfor the lifetime of a server process may observe unbounded memory growth in the\nevent a malicious client repeatedly sends requests containing unique extra\ncertificates, which may lead to OOM conditions.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: If a remote user sends CMP messages to a server with a list of\nextraCerts and the message is rejected, the extraCerts from the message remains\nin the server contexts untrusted certificate stack.  This exposes servers with\nlong lived ctx objects to Denial of Service attacks in which an attacker sends\nmessages intending to be rejected with a large list of additional certificates\nrepeatedly, forcing the server to store them indefinitely.\n   \nThe issue was fixed by removing the added extra certs if the message is\nrejected, using the same method as when the context is configured to not do\ncaching at all.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.4","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.8","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.7","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.22","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-25T14:36:10.702053Z","id":"CVE-2026-63074","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.22","matchCriteriaId":"5DAAFBD8-3DEE-4F6B-8D83-02966005168A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.7","matchCriteriaId":"216D6529-561A-4684-A886-50954FBEBFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.8","matchCriteriaId":"C5BB9E95-09B6-4163-B51C-D62B528A04DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.4","matchCriteriaId":"B1416826-F2F1-4EA8-9FB2-A56B0DA923C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.2","matchCriteriaId":"63B8F45B-E44F-481C-815D-AF9CA89C48F6"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/01e567978a55fba18142a230380c31296049fae7","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/74ae7f6df47a5767c1010b88c47507dfc5b32c46","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/75360af9650d4e0c82ba0050c5c9912cd79e54af","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/f636f9ca0fa1bae5b42f9e787f025c96fb09c43a","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260825.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-63075","sourceIdentifier":"openssl-security@openssl.org","published":"2026-08-25T13:19:26.413","lastModified":"2026-09-11T21:17:05.403","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly\nsends ack-eliciting packets while not acknowledging ACK-only responses, the\nQUIC stack can retain ACK-only packet metadata for the lifetime of the\nconnection.\n\nImpact summary: A remote peer that can complete a QUIC handshake can\ncause connection-scoped memory growth which may lead to Denial of Service\nthrough memory exhaustion, especially with sustained traffic or many concurrent\nQUIC connections.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: When the OpenSSL QUIC stack sends an ACK-only packet,\nthere is no requirement by the QUIC protocol that the peer will acknowledge\nthat ACK-only packet (i.e. it is itself not ack-eliciting). However, the OpenSSL\nimplementation stores the metadata about the ACK frames regardless.\nIn and of itself that's ok, but if a malicious peer establishes a connection, and\nthen drives the connection such that ACK-only packets are forced from the \nOpenSSL implementation peer (i.e., by sending numerous PING frames),\nand then withholding any subsequent acks for ack-eliciting data, like\nlegitimate data, said malicious peer can force inappropriate memory growth\non the OpenSSL peer, potentially leading to a Denial of Service.\n\nThe fix is to ensure that we account for the transmission of the ACK-only\npacket in the packet histories high and low watermark without actually storing\nthe ACK-only packet metadata itself.\n\nFIPS impact: no\nThe OpenSSL FIPS module is not affected as the QUIC code is\noutside the FIPS module boundary."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.4","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.8","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-25T14:36:48.832724Z","id":"CVE-2026-63075","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.7","matchCriteriaId":"216D6529-561A-4684-A886-50954FBEBFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.8","matchCriteriaId":"C5BB9E95-09B6-4163-B51C-D62B528A04DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.4","matchCriteriaId":"B1416826-F2F1-4EA8-9FB2-A56B0DA923C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.2","matchCriteriaId":"63B8F45B-E44F-481C-815D-AF9CA89C48F6"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/7308946576b12e64b8be53bcf0a120354b2b42bc","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7c98d79738549df92868e7dd9be4bbf061eed709","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/bf84721c2548351176e367e6de505792f0118dc6","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260825.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-63076","sourceIdentifier":"openssl-security@openssl.org","published":"2026-08-25T13:19:26.543","lastModified":"2026-09-11T21:17:12.460","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: OpenSSL CMP password based protection verification only\nchecks whether the protectionAlg parameter was not NULL and not its\nASN.1 type, before treating it as a PBMParameter. A crafted message can\ncontain a parameter of a different type, which is then dereferenced as an\ninvalid pointer.\n\nImpact summary: A remote, unauthenticated attacker can crash an application\nacting as a CMP server that accepts PBM-protected messages, or a CMP client\ntalking to a malicious or intercepted CMP server, resulting in a Denial of\nService.\n\nCWE: CWE-476: NULL Pointer Dereference\n\nDescription: When verifying the password-based MAC protection of a CMP\nmessage, OpenSSL library reads the protectionAlg algorithm parameter with\nX509_ALGOR_get0(), which returns both the parameter type and its value\npointer. The value is then cast to an ASN1_STRING and treated as the\nexpected PBMParameter after only checking that pointer is not NULL. The\nparameter type returned by X509_ALGOR_get0() was never consulted.\n\nThis happens during protection verification, before any MAC is computed, so\nno knowledge of the PBM shared secret is required; the only precondition is\nthat PBM verification is reachable. On the server side this is reached from\nOSSL_CMP_SRV_process_request() for any application that stands up a CMP\nserver accepting PBM-protected messages, and on the client side from CMP\nresponse validation against a malicious or on-path (MITM) server. The\nreliable consequence is a denial of service; there is no memory disclosure,\nno controlled memory write, and no path to code execution. CMP is a\nspecialized feature that an application must explicitly enable.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.2","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.4","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.8","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.7","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.22","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-25T14:37:28.943884Z","id":"CVE-2026-63076","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.22","matchCriteriaId":"5DAAFBD8-3DEE-4F6B-8D83-02966005168A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.7","matchCriteriaId":"216D6529-561A-4684-A886-50954FBEBFB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.8","matchCriteriaId":"C5BB9E95-09B6-4163-B51C-D62B528A04DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.4","matchCriteriaId":"B1416826-F2F1-4EA8-9FB2-A56B0DA923C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.2","matchCriteriaId":"63B8F45B-E44F-481C-815D-AF9CA89C48F6"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/37882aa2e0256e1072442a8f62f7db45b995c45b","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a17cc8d612ecff6d94a9b7ca8b5283ddf5ff570e","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a1f348ccb328c3afbd4ba6883f9b7c813c043259","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/a7af46a92d0ce19a90e669ef56d2576a07924226","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/cdacfff557389abfa9e4615abded2ec984517d6c","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260825.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-77998","sourceIdentifier":"security@joomla.org","published":"2026-08-25T13:19:30.817","lastModified":"2026-09-08T11:17:44.560","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4,  SAML SP Single Sign On – SAML SSO login with Google Apps < 6.4 - This is due to the mo_saml_validate_signature() function performing a loose boolean check on the raw tri-state integer returned by PHP's openssl_verify(), causing an error return value of -1 to be evaluated as truthy and therefore treated as a successful signature verification. This makes it possible for unauthenticated attackers to log in as any existing Joomla user, including administrators, by submitting a crafted SAMLResponse containing an attacker-controlled NameID and a deliberately malformed signature value that triggers an OpenSSL processing error — bypassing verification entirely and resulting in wp_set_auth_cookie() being called for the targeted account."}],"affected":[{"source":"security@joomla.org","affectedData":[{"vendor":"miniorange.com","product":"SAML SSO Free for Joomla extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-11.0.1","status":"affected"}]},{"vendor":"miniorange.com","product":"SAML SSO Basic for Joomla extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-13.1.0","status":"affected"}]},{"vendor":"miniorange.com","product":"SAML SSO Standard for Joomla extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-24.1.0","status":"affected"}]},{"vendor":"miniorange.com","product":"SAML SSO Premium for Joomla extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-34.1.0","status":"affected"}]},{"vendor":"miniorange.com","product":"SAML SSO Enterprise for Joomla extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-44.1.0","status":"affected"}]},{"vendor":"miniorange.com","product":"SAML SP Single Sign On – Login with ADFS extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-6.3.0","status":"affected"}]},{"vendor":"miniorange.com","product":"SAML SSO login with Google Apps extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-6.3.0","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security@joomla.org","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":10.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-25T14:38:55.305998Z","id":"CVE-2026-77998","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@joomla.org","type":"Secondary","description":[{"lang":"en","value":"CWE-639"}]}],"references":[{"url":"https://www.miniorange.com/","source":"security@joomla.org"}]}},{"cve":{"id":"CVE-2026-81680","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:57.300","lastModified":"2026-09-03T15:06:30.603","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silently removing recovery paths the owner deliberately added."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T19:23:50.488382Z","id":"CVE-2026-81680","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-grhj-cpmg-f5mx","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-authentication-bypass-via-recovery-slot-removal","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81681","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:57.453","lastModified":"2026-09-02T13:13:05.633","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 advertise a portable USB workspace as an 'Encrypted USB Workspace' with AES-256-GCM encryption and write a marker declaring the workspace encrypted, but the workspace directory is actually stored in cleartext and the derived encryption key is never applied to it. A user who trusts the branding and places files in the workspace leaves them unencrypted on the removable media, so an attacker with physical access to the media can read the sensitive files. Fixed in 1.4.9, which seals the workspace into an authenticated AES-256-GCM vault."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T17:50:56.476052Z","id":"CVE-2026-81681","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-311"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-2jv6-qqfm-m46m","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-false-encryption-via-cleartext-storage","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81682","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:57.660","lastModified":"2026-09-23T17:17:42.623","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI that writes decrypted plaintext with world-readable default permissions. Attackers can read decrypted output files created by the GUI as unprivileged local users on multi-user systems."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.6,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-31T15:56:00.927727Z","id":"CVE-2026-81682","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-276"}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-7q4g-rrw4-rf2m","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-insecure-file-permissions","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-81683","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:57.810","lastModified":"2026-09-02T13:12:29.363","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt (pip package openssl-encrypt) versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable (0644) SharedPreferences file via the desktop GUI's Settings screen 'combined certificate and private key' PEM field. A local attacker with file system access can read the exposed private key. Version 1.4.9 writes the PEM to a dedicated 0600 file, keeps only its path in SharedPreferences, and migrates/scrubs existing cleartext values."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.6,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:19:21.836541Z","id":"CVE-2026-81683","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-r8gw-6hfj-98jw","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-plaintext-private-key-storage","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81684","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:57.957","lastModified":"2026-09-03T15:07:41.270","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"In openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI passes the steganography password to the CLI child process on the command line via the --stego-password argument (on both encrypt and decrypt paths) instead of via an environment variable as done for the main password. Any local user can read the steganography password from /proc/<pid>/cmdline for the lifetime of the subprocess. Fixed in 1.4.9."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.5,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:24:06.748858Z","id":"CVE-2026-81684","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-214"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-rx2c-m92f-qv6p","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-information-disclosure-via-command-line","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81685","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:58.110","lastModified":"2026-09-02T13:12:08.453","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 fail to sanitize recovery-slot metadata in the desktop GUI, allowing attackers to inject control characters and line separators into the irreversible-removal confirmation dialog. Attackers can craft encrypted files with malicious slot identifiers containing bidi overrides or line-separator characters to forge warning text and deceive users during file removal operations."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T19:24:40.534525Z","id":"CVE-2026-81685","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-116"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-49h2-qmcq-wvvc","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-text-injection-via-recovery-slot-metadata","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81686","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:58.257","lastModified":"2026-09-02T13:11:58.200","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set method performs neither a polkit authorization check nor value validation. Any local user on the system bus can call Set without authorization and set MaxConcurrentOperations (to 0/negative, causing the concurrency gate to refuse all subsequent operations, or to a huge value removing the limit) or the unbounded DefaultTimeout, resulting in a persistent denial of service of the root daemon. The D-Bus service exists only on the 1.4.x line and was removed in 1.5.x."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:06:14.323611Z","id":"CVE-2026-81686","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-7fhx-8rmv-qjj3","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-d-bus-properties-authorization-bypass","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81687","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:58.410","lastModified":"2026-09-23T17:17:42.653","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 fail to enforce a time ceiling on key derivation function iteration counts specified in file metadata. Attackers can craft files with extremely high KDF iteration counts to consume CPU resources for unbounded periods before password verification occurs."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-31T15:56:48.802395Z","id":"CVE-2026-81687","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-rv6w-7hq9-pr74","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-denial-of-service-via-kdf","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-81688","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:58.553","lastModified":"2026-09-02T13:11:25.713","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartext file header metadata. Attackers can read this hash without the password to confirm guessed plaintexts offline or fingerprint identical plaintexts across separately-encrypted files."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:20:02.969504Z","id":"CVE-2026-81688","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-311"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-7c3q-gp4v-q29q","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-plaintext-confirmation-oracle-via-sha-256","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81689","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:58.697","lastModified":"2026-09-03T15:07:51.097","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and files. Attackers with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wide offline password guessing at hardware speed to recover user passwords."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:38:50.371056Z","id":"CVE-2026-81689","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-916"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-3v63-778v-3mvp","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-weak-pepper-key-derivation","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81690","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:58.843","lastModified":"2026-09-02T13:10:16.537","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl-encrypt (pip package) before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob(), which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while O_NOFOLLOW on the hash side binds only the final path component. An evil-maid attacker with physical access to the removable drive could replace a tool-tree directory with a symlink to a copy containing byte-identical files plus a planted __pycache__/*.pyc file (which CPython loads in preference to recompiling the clean .py). The planted file is never enumerated, added_files stays 0, and verify-usb reports PASSED, resulting in code execution when the victim runs the portable install. Fixed in 1.4.9 (affects both 1.4.x and 1.5.x lines)."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":5.8}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T19:25:39.673939Z","id":"CVE-2026-81690","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-hw7h-wqf5-6crx","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/verify-usb-before-1.4.9-symlink-directory-traversal-code-execution","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81691","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:58.993","lastModified":"2026-09-02T13:10:07.170","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers on the network path can intercept cleartext credentials including client_id, passwords, and JWTs to achieve full keyserver account takeover."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T17:51:57.438583Z","id":"CVE-2026-81691","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-xr64-hcxg-4ghr","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-credential-leakage-via-unvalidated-server-urls","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81692","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:59.140","lastModified":"2026-09-23T17:17:42.677","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt (pip: openssl-encrypt) versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO total_samples field of FLAC files before using it to size an allocation (np.random.randint(size=(total_samples, channels))). A ~50-byte crafted FLAC file declaring ~100 million samples causes a multi-gigabyte memory allocation, leading to out-of-memory denial of service during 'decrypt --stego-extract'. The issue is fixed in 1.4.9; both the 1.4.x and 1.5.x lines are affected."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-31T15:57:31.927896Z","id":"CVE-2026-81692","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-789"}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-wr9q-p3rj-vqq7","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-denial-of-service-via-streaminfo","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-81693","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:59.297","lastModified":"2026-09-02T13:09:58.050","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR images with extremely large total values to trigger unbounded memory allocation and cause denial of service through out-of-memory conditions."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:31:28.585604Z","id":"CVE-2026-81693","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-789"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-r23m-gf2m-8www","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-denial-of-service-via-qr-total-field","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81694","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:59.447","lastModified":"2026-09-03T15:08:49.560","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from untrusted drive data (outside the AES-GCM authenticated manifest) before printing them in the verify-usb command's output. An attacker can plant filenames containing terminal cursor-movement and erase-line control bytes that repaint a forged PASSED verdict on screen, masking actual tamper detection. Fixed in 1.4.9 by routing drive-derived names through sanitize_for_display()."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:47:58.198454Z","id":"CVE-2026-81694","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-117"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-c793-rj9w-r3wg","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/verify-usb-before-1.4.9-output-injection-via-unsanitized-filenames","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81695","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:59.597","lastModified":"2026-09-01T20:20:58.383","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to stderr during decrypt auto-detection. Attackers can craft encrypted files with malicious key_id containing escape sequences to repaint terminal output and forge authenticity verification blocks."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T19:26:15.335558Z","id":"CVE-2026-81695","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-117"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-jwfm-99h7-2w5x","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-terminal-injection-via-key-id","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81696","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:59.743","lastModified":"2026-09-01T20:21:05.370","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T17:42:03.308191Z","id":"CVE-2026-81696","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-117"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-539p-fxf4-7fv8","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-terminal-injection-via-info-command","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81697","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:20:59.893","lastModified":"2026-09-23T17:17:42.700","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 contain a CWD-relative configuration file resolution flaw in crypt_settings.py, where CONFIG_FILE (originally the absolute per-user path ~/.crypt_settings.json) is reassigned at line 84 to the bare relative name 'crypt_settings.json'. As a result, the legacy Tk GUI's SettingsTab reads and writes KDF settings from crypt_settings.json in the process launch (current working) directory instead of the user's home directory. An attacker who plants a malicious crypt_settings.json (e.g. sha256:1 with all memory-hard KDFs disabled) can silently downgrade encryption performed in that GUI session to roughly one hash round, bypassing the weak-KDF preflight and enabling offline brute-force attacks against the resulting ciphertext. Fixed in 1.4.9."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-31T15:58:13.124641Z","id":"CVE-2026-81697","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-426"}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-7j2v-g84w-m75v","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-kdf-downgrade-via-cwd-relative-configuration","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-81698","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:00.070","lastModified":"2026-09-01T18:16:56.927","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like pepper_name containing shell commands that execute when users copy the printed CLI block into a shell."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:20:34.415014Z","id":"CVE-2026-81698","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-gw2m-mj6q-59hc","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-shell-injection-via-info-command","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81699","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:00.217","lastModified":"2026-09-03T15:09:04.887","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing. Attackers can supply malicious files with excessive KDF parameters to exhaust system resources and crash or wedge the process before password verification occurs."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:38:48.311398Z","id":"CVE-2026-81699","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-phmr-p567-q5g6","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-denial-of-service-via-unbounded-kdf-cost","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81700","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:00.367","lastModified":"2026-09-01T18:13:59.553","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_detached that accepts revoked and expired keys by only checking VALIDSIG status without inspecting REVKEYSIG, EXPKEYSIG, or gpg exit codes. Attackers holding compromised-then-revoked signing keys or expired project keys can bypass signature verification to execute malicious plugins in the host process."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T19:26:43.477225Z","id":"CVE-2026-81700","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-x38r-8wf3-q9hq","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-gpg-signature-verification-bypass","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81701","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:00.533","lastModified":"2026-09-01T18:12:15.613","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsigned plugins following documented installation paths to achieve arbitrary code execution in the CLI process with access to passwords and cryptographic keys."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T17:40:43.830805Z","id":"CVE-2026-81701","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-wxx9-p55f-wm34","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-arbitrary-code-execution-via-unsigned-plugin","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81702","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:00.680","lastModified":"2026-09-03T15:09:14.280","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute public keys in identity stores. Attackers can replace legitimate public keys with their own while maintaining the claimed fingerprint, enabling silent key substitution where encryption uses attacker keys and signature verification appears valid."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-31T15:58:58.550416Z","id":"CVE-2026-81702","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-q8p3-7h6h-ghfr","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-key-substitution-via-identity-load","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81703","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:00.833","lastModified":"2026-09-01T18:11:14.783","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false integrity verification."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:21:01.407028Z","id":"CVE-2026-81703","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-qqfq-g2cv-j7v3","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-authentication-bypass-via-unencrypted-pqc-key","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81704","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:00.993","lastModified":"2026-09-03T15:09:32.657","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faster than documented protection by exploiting the missing key stretching and hash rounds."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:38:46.143008Z","id":"CVE-2026-81704","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-916"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-v9r6-grch-fxw7","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-weak-key-derivation-via-d-bus","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81705","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:01.147","lastModified":"2026-09-01T17:59:54.667","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbreviated long-option spellings (e.g. --passw). The sanitizer only recognized exact option names, --option=value forms, and tokens starting with -p, so these spellings bypass the redaction chokepoint and the cleartext password is written to stderr. Anyone with access to that output (terminal scrollback, merged 2>&1 output, CI job logs, or the GUI's persistent debug log) can recover the password."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T19:27:35.639597Z","id":"CVE-2026-81705","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-jgvm-7jxv-cgcc","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-password-cleartext-leak-via-debug","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81706","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:01.293","lastModified":"2026-09-01T17:57:53.053","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt before 1.4.9 fails to prevent namespace collisions between own identities and contacts in IdentityStore, allowing attackers to create shadowed contact entries invisible until the corresponding own identity is deleted. When the own identity is deleted, the shadowed contact becomes visible and resolves to the attacker's keys, enabling silent key substitution for encrypted files."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T17:38:49.457236Z","id":"CVE-2026-81706","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-8gmx-w9m8-vx7q","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-key-substitution-via-identity-shadowing","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81707","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:01.440","lastModified":"2026-09-23T17:17:42.730","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line displayed to users. Attackers can deliver a crafted identity bundle through normal contact-exchange flows or keyserver responses to manipulate terminal output and display a fraudulent fingerprint, bypassing the out-of-band verification mechanism that protects against key substitution attacks."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-31T18:00:01.002825Z","id":"CVE-2026-81707","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-qjr2-x6mr-8xgf","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-ansi-escape-injection-via-identity-email","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-81714","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:01.590","lastModified":"2026-09-02T13:09:21.383","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt (pip: openssl-encrypt) versions <= 1.4.8 use suffix-tolerant fingerprint matching in enroll_trust_key when binding a plugin-signing trust anchor. An operator who confirms a short (forgeable, ~32-bit) GPG key id could unknowingly enroll an attacker's colliding key as a trusted anchor, which then vouches for malicious plugins under the ENFORCE signature policy. Version 1.4.9 fixes this by requiring the confirmed value to exactly match the full primary-key fingerprint (case-insensitive, whitespace-stripped)."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.0,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:21:49.871096Z","id":"CVE-2026-81714","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-xg52-638v-jc5m","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-plugin-signing-trust-anchor-enrollment-bypass","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81715","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:01.733","lastModified":"2026-09-03T15:09:44.487","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug argv dump, because sanitize_argv_for_debug fails to sanitize it. As a result the token is printed in cleartext to stderr under --debug (even without --unsafe-show-secrets), persisting the credential in logs and terminal history. Fixed in 1.4.9."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:38:43.894915Z","id":"CVE-2026-81715","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-jqqp-pf9j-889j","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-credential-exposure-via-debug-output","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81716","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:01.877","lastModified":"2026-09-02T13:09:05.350","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt (pip: openssl-encrypt) versions before 1.4.9 contain a path traversal flaw in PluginSandbox._is_safe_path, which authorized file access using a bare string-prefix match. A sandboxed plugin without the READ_FILES permission could read or write another plugin's directory that merely shares a name prefix (e.g., .../plugins/foobar matching allowed .../plugins/foo), breaking per-plugin isolation within the same user. Fixed by matching each allowed directory exactly or with a trailing path separator."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","baseScore":5.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.0,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T19:28:17.572595Z","id":"CVE-2026-81716","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-vr4h-5xqv-xxxf","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-plugin-sandbox-path-traversal","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81717","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:02.033","lastModified":"2026-09-02T13:20:18.133","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted (attacker with physical write access). USBDriveCreator._verify_integrity_file only validates files listed in the manifest, so files added to the drive — including a root-level autorun payload — are not detected and integrity verification still passes. Additionally, a globally constant, source-embedded KDF salt (_LEGACY_FIXED_SALT) is used to derive the drive encryption key for any drive lacking a per-drive salt file, defeating precomputation resistance and enabling an offline rainbow-table attack."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":3.5,"baseSeverity":"LOW","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T17:37:21.258814Z","id":"CVE-2026-81717","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-8jx3-27qf-3p97","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-integrity-bypass-via-added-files","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81718","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:02.180","lastModified":"2026-09-23T17:17:42.763","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping passwords offline using GPU or ASIC acceleration."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl-encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-31T18:01:31.007802Z","id":"CVE-2026-81718","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-326"}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-fmjx-p826-6fvr","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-weak-cryptographic-parameters","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-81719","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:02.320","lastModified":"2026-09-02T13:15:43.110","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WARN, so an unsigned/unverifiable non-built-in plugin was compiled and executed in the host process at import time, before the runtime sandbox is installed. The only default gate was an incomplete, bypassable AST denylist. If a user is induced to load an attacker's plugin, this results in arbitrary code execution with the privileges of the user running openssl_encrypt. Fixed in 1.4.9 by defaulting the signature policy to ENFORCE for non-built-in plugins."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:27:57.459770Z","id":"CVE-2026-81719","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-587j-4r3v-cm2c","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-remote-code-execution-via-plugin","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81720","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:02.477","lastModified":"2026-09-03T15:09:57.017","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive memory_cost values that cause the host to crash when unlocking identities before authentication."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T18:24:04.426141Z","id":"CVE-2026-81720","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-783h-8q2f-f762","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-denial-of-service-via-unbounded-argon2","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-81721","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-08-27T17:21:02.650","lastModified":"2026-09-02T13:15:35.677","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"openssl_encrypt before 1.4.9 fails to validate KDF cost parameters in encrypted file metadata and keystore headers, allowing attackers to trigger unbounded memory allocation. Attackers can craft malicious encrypted files declaring arbitrarily large Argon2, scrypt, or balloon KDF parameters to exhaust system memory and crash the process without authentication."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"jahlives","product":"openssl_encrypt","defaultStatus":"unaffected","packageURL":"pkg:pypi/openssl_encrypt","versions":[{"version":"0","lessThan":"1.4.9","versionType":"semver","status":"affected"},{"version":"1.4.9","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-08-27T19:28:40.770457Z","id":"CVE-2026-81721","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*","versionEndExcluding":"1.4.9","matchCriteriaId":"FD56825F-BB89-468A-925F-88FB1F0B609F"}]}]}],"references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-7894-5gw8-69hr","source":"disclosure@vulncheck.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-denial-of-service-via-kdf-2","source":"disclosure@vulncheck.com","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-45221","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-09-01T20:17:14.680","lastModified":"2026-09-08T20:18:59.270","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL configuration or library files in a hardcoded filesystem path absent from default installations. On Windows, the missing directory resides in a location writable by any authenticated local user, enabling attackers to create the directory and place malicious files that execute at the privilege level of the user or service account that launches Konga, facilitating privilege escalation."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"EASYBYTE Software","product":"Konga","defaultStatus":"affected","versions":[{"version":"0","lessThan":"2.1.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.5,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-02T15:41:40.357575Z","id":"CVE-2026-45221","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"references":[{"url":"https://public.easybyte.it/downloads/archive/2.1.0","source":"disclosure@vulncheck.com"},{"url":"https://www.easybyte.it/","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/konga-privilege-escalation-via-hardcoded-openssl-path","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-84964","sourceIdentifier":"cna@mongodb.com","published":"2026-09-03T16:18:25.270","lastModified":"2026-09-22T16:19:25.187","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS endpoint that the client already trusts. During the handshake, specially formed certificate data can cause the same heap object to be released twice. An unauthenticated party acting as the trusted endpoint may cause the connecting client application to terminate unexpectedly."}],"affected":[{"source":"cna@mongodb.com","affectedData":[{"vendor":"MongoDB","product":"C Driver","defaultStatus":"unaffected","versions":[{"version":"1.17.0","lessThan":"1.30.9","versionType":"semver","status":"affected"},{"version":"2.0.0","lessThan":"2.5.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"cna@mongodb.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"cna@mongodb.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-03T15:41:47.363270Z","id":"CVE-2026-84964","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cna@mongodb.com","type":"Secondary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:c_driver:*:*:*:*:*:mongodb:*:*","versionStartIncluding":"1.17.0","versionEndExcluding":"1.30.9","matchCriteriaId":"CB49A0B9-43EE-4165-A35A-3591CBC9A76E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:c_driver:*:*:*:*:*:mongodb:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.5.2","matchCriteriaId":"BF59A7F0-687B-44EB-8FD8-62582BEC078C"}]}]}],"references":[{"url":"https://jira.mongodb.org/browse/CDRIVER-6409","source":"cna@mongodb.com","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-6958","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-09-04T15:17:35.360","lastModified":"2026-09-24T20:43:32.537","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanning Engine (wvsc.exe) that allows low-privileged local attackers to execute arbitrary code as SYSTEM by exploiting a missing hardcoded directory path for OpenSSL-related files. Attackers can create the missing directory, place a malicious file at the expected path, and cause the SYSTEM-level wvsc.exe process to load and execute it, resulting in full privilege escalation."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"Invicti Security Corp.","product":"Acunetix","defaultStatus":"affected","versions":[{"version":"25.11.251107123","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.5,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-10T14:07:59.844206Z","id":"CVE-2026-6958","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-427"}]}],"references":[{"url":"https://olografix.org/acme/_poc/CVE-2026-6958.pdf","source":"disclosure@vulncheck.com"},{"url":"https://seclists.org/fulldisclosure/2026/Sep/0","source":"disclosure@vulncheck.com"},{"url":"https://www.acunetix.com/","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/acunetix-local-privilege-escalation-via-wvsc-exe","source":"disclosure@vulncheck.com"},{"url":"http://seclists.org/fulldisclosure/2026/Sep/0","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2026-57163","sourceIdentifier":"security-advisories@github.com","published":"2026-09-04T18:17:54.547","lastModified":"2026-09-11T15:51:33.793","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate (tls_cert_get_info() in ssl_sock_gtls.c). Only GnuTLS builds are affected (--with-gnutls); OpenSSL and Apple SecureTransport/Network.framework builds are not affected. While extracting certificate information after a TLS handshake, an incorrect buffer-size value can cause an oversized SubjectAltName entry to be written past the end of a fixed-size stack buffer. A network-positioned attacker presenting a crafted certificate — a malicious server to a connecting client, or a malicious client to a server that requests certificates — can trigger this during the TLS handshake, before any SIP-level authentication. Impact may range from unexpected application termination to control flow hijack/memory corruption. This issue has been patched via commit c4a151a."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"pjsip","product":"pjproject","versions":[{"version":"< c4a151af86fadd16d9480b2603eeb2abf4fb4f78","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-04T17:25:40.460080Z","id":"CVE-2026-57163","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Primary","description":[{"lang":"en","value":"CWE-121"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:*","versionEndIncluding":"2.17","matchCriteriaId":"C6941BF6-97FA-4BA2-989F-AE04E676A985"}]}]}],"references":[{"url":"https://github.com/pjsip/pjproject/commit/c4a151af86fadd16d9480b2603eeb2abf4fb4f78","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/pjsip/pjproject/security/advisories/GHSA-jm2j-6rg6-qvwx","source":"security-advisories@github.com","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-52767","sourceIdentifier":"security-advisories@github.com","published":"2026-09-05T00:17:19.540","lastModified":"2026-09-08T21:05:26.920","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"YesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, HttpSignatureService::verifySignature() checks the result of PHP's openssl_verify() with a loose boolean negation - if (!openssl_verify(...)) { throw ... }. PHP's openssl_verify has four possible return values: 1, 0, -1, and \"false\". The -1 row is the bypass: PHP's truthiness rules make -1 a truthy value, so !(-1) === false, the throw is skipped, and the controller proceeds to processActivity(). Any condition that makes OpenSSL's EVP_VerifyFinal() return -1 triggers the bypass. The reachable consequence is the controller silently treats a failed verification as success and processes the attacker's payload. This issue has been patched in version 4.6.6."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"YesWiki","product":"yeswiki","versions":[{"version":">= 4.6.2, < 4.6.6","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-08T17:51:20.326023Z","id":"CVE-2026-52767","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"references":[{"url":"https://github.com/YesWiki/yeswiki/commit/d1795e0301e1a1078f17b4b98f56fff70de2029e","source":"security-advisories@github.com"},{"url":"https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6","source":"security-advisories@github.com"},{"url":"https://github.com/YesWiki/yeswiki/security/advisories/GHSA-mv28-wj57-f57g","source":"security-advisories@github.com"},{"url":"https://github.com/YesWiki/yeswiki/security/advisories/GHSA-mv28-wj57-f57g","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2026-13447","sourceIdentifier":"security@wordfence.com","published":"2026-09-05T06:17:09.403","lastModified":"2026-09-08T13:12:58.310","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verify_id_token() function, which decodes and validates Firebase ID token claims (alg, kid, aud, iss) but never calls openssl_verify() or any equivalent to validate the JWT signature against Google's actual public key certificates. This makes it possible for unauthenticated attackers to forge a Firebase Phone Auth JWT signed with a self-generated RSA key pair and impersonate any phone number, resulting in unauthorized access to existing WordPress accounts or creation of new arbitrary accounts."}],"affected":[{"source":"security@wordfence.com","affectedData":[{"vendor":"inspireui","product":"MStore API – Create Native Android & iOS Apps On The Cloud","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"4.20.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@wordfence.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-07T11:08:56.472544Z","id":"CVE-2026-13447","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@wordfence.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"references":[{"url":"https://plugins.trac.wordpress.org/browser/mstore-api/tags/4.18.4/controllers/flutter-user.php#L829","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/mstore-api/tags/4.18.4/controllers/flutter-user.php#L940","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/mstore-api/tags/4.18.4/controllers/helpers/firebase-phone-auth-helper.php#L5","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php#L829","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php#L940","source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/helpers/firebase-phone-auth-helper.php#L5","source":"security@wordfence.com"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4a1127af-74f6-4748-9aee-5a8c6c2766a4?source=cve","source":"security@wordfence.com"}]}},{"cve":{"id":"CVE-2026-80229","sourceIdentifier":"2499f714-1537-4658-8207-48ae4bb9eae9","published":"2026-09-06T18:17:22.217","lastModified":"2026-09-15T07:16:30.157","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"When performing transfers via libcurl’s multi interface, pooled TLS\nconnections can outlive their originating easy handles. In OpenSSL 3 provider\nconfigurations, libcurl attaches an allocated library context to the easy\nhandle's state and passes it to OpenSSL without acquiring an ownership\nreference; destroying the easy handle prematurely frees this context while the\nactive connection retains a dangling pointer, leading to a heap-use-after-free\nupon subsequent I/O or post-handshake operations."}],"affected":[{"source":"2499f714-1537-4658-8207-48ae4bb9eae9","affectedData":[{"vendor":"curl","product":"curl","defaultStatus":"unaffected","versions":[{"version":"8.14.0","lessThan":"8.14.2","versionType":"semver","status":"affected"},{"version":"8.15.0","lessThan":"8.16.1","versionType":"semver","status":"affected"},{"version":"8.17.0","lessThan":"8.20.1","versionType":"semver","status":"affected"},{"version":"8.21.0","lessThan":"8.22.0","versionType":"semver","status":"affected"}]},{"vendor":"curl","product":"curl","defaultStatus":"unaffected","repo":"https://github.com/curl/curl.git","versions":[{"version":"f2ce6c46b9dcc46ced0ce43fa95176ea7599a854","lessThan":"7ea37abc6ac0120ba5f6d94be8d196f7cf1506bb","versionType":"git","status":"affected"}]},{"vendor":"curl","product":"curl","defaultStatus":"unaffected","versions":[{"version":"8.21.0","status":"affected"},{"version":"8.20.0","status":"affected"},{"version":"8.19.0","status":"affected"},{"version":"8.18.0","status":"affected"},{"version":"8.17.0","status":"affected"},{"version":"8.16.0","status":"affected"},{"version":"8.15.0","status":"affected"},{"version":"8.14.1","status":"affected"},{"version":"8.14.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-08T15:43:30.858480Z","id":"CVE-2026-80229","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"2499f714-1537-4658-8207-48ae4bb9eae9","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*","versionStartIncluding":"8.14.0","versionEndExcluding":"8.22.0","matchCriteriaId":"BD5E954C-B8F9-44EB-AD71-A556F95EEE58"}]}]}],"references":[{"url":"https://curl.se/docs/CVE-2026-80229.html","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Patch","Vendor Advisory"]},{"url":"https://curl.se/docs/CVE-2026-80229.json","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Vendor Advisory"]},{"url":"https://hackerone.com/reports/3969255","source":"2499f714-1537-4658-8207-48ae4bb9eae9","tags":["Exploit","Mitigation","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-78123","sourceIdentifier":"cve@mitre.org","published":"2026-09-11T02:18:33.413","lastModified":"2026-09-15T16:17:24.463","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"strongSwan","product":"strongSwan","defaultStatus":"unaffected","versions":[{"version":"5.0.2","lessThan":"6.1.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-15T15:25:21.384557Z","id":"CVE-2026-78123","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@mitre.org","type":"Secondary","description":[{"lang":"en","value":"CWE-825"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.2","versionEndExcluding":"6.1.0","matchCriteriaId":"D71DC666-04F7-4CF3-ADA7-4B13E283AC85"}]}]}],"references":[{"url":"https://github.com/strongswan/strongswan/releases/tag/6.1.0","source":"cve@mitre.org","tags":["Patch","Release Notes","Vendor Advisory"]},{"url":"https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78123).html","source":"cve@mitre.org","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-78124","sourceIdentifier":"cve@mitre.org","published":"2026-09-11T02:18:33.770","lastModified":"2026-09-14T20:09:47.260","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"strongSwan","product":"strongSwan","defaultStatus":"unaffected","versions":[{"version":"5.0.2","lessThan":"6.1.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-11T20:05:14.510796Z","id":"CVE-2026-78124","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@mitre.org","type":"Secondary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.2","versionEndExcluding":"6.1.0","matchCriteriaId":"D71DC666-04F7-4CF3-ADA7-4B13E283AC85"}]}]}],"references":[{"url":"https://github.com/strongswan/strongswan/releases/tag/6.1.0","source":"cve@mitre.org","tags":["Patch","Release Notes","Vendor Advisory"]},{"url":"https://www.strongswan.org/blog/2026/09/07/strongswan-vulnerability-(cve-2026-78124).html","source":"cve@mitre.org","tags":["Mitigation","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-90439","sourceIdentifier":"f5sirt@f5.com","published":"2026-09-15T15:17:27.023","lastModified":"2026-09-18T19:34:36.657","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL versions <= OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This can happen in a non-deterministic manner that is beyond the attacker's control. This may cause a heap buffer overflow in the NGINX worker process leading to a restart and/or limited data corruption.\n\nImpact:\nThis vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system or limited data corruption. There is no control plane exposure; this is a data plane issue only.\n\n\n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated."}],"affected":[{"source":"f5sirt@f5.com","affectedData":[{"vendor":"F5","product":"NGINX Plus","defaultStatus":"unknown","modules":["ngx_http_v3_module"],"versions":[{"version":"37.1.0.1","lessThan":"37.1.1.2","versionType":"custom","status":"affected"},{"version":"37.0.0.1","lessThan":"37.0.6.2","versionType":"custom","status":"affected"}]},{"vendor":"F5","product":"NGINX Open Source","defaultStatus":"unaffected","modules":["ngx_http_v3_module"],"versions":[{"version":"1.29.2","lessThan":"1.31.6","versionType":"semver","status":"affected"},{"version":"1.30.4","lessThan":"1.30.5","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"f5sirt@f5.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"f5sirt@f5.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-15T14:48:56.965070Z","id":"CVE-2026-90439","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"f5sirt@f5.com","type":"Secondary","description":[{"lang":"en","value":"CWE-122"}]}],"references":[{"url":"https://my.f5.com/manage/s/article/K000162604","source":"f5sirt@f5.com"}]}},{"cve":{"id":"CVE-2026-92939","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-09-17T14:17:58.970","lastModified":"2026-09-17T15:17:00.650","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto module to a NodeVM sandbox when the crypto builtin is allowed. The module is presented via a recursive read-only proxy, but its callable exports still execute with host-process authority. Sandboxed JavaScript can therefore call crypto.setEngine() with a filesystem path to an attacker-supplied native library (for example, one bundled in an untrusted plugin package already written to disk); OpenSSL asks the operating-system dynamic loader to load the file, and the library's constructor executes native code in the host process before engine-symbol validation rejects it. Exploitation requires only the crypto builtin and does not require fs, process, module, child_process, worker_threads, vm, or inspector access, resulting in a sandbox escape and arbitrary native code execution. Fixed in 3.11.7."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"patriksimek","product":"vm2","defaultStatus":"unaffected","packageURL":"pkg:npm/vm2","versions":[{"version":"3.11.3","lessThan":"3.11.7","versionType":"semver","status":"affected"},{"version":"3.11.7","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.4,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":9.9,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.1,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-17T14:26:12.253959Z","id":"CVE-2026-92939","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-114"}]}],"references":[{"url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-46pr-c5wc-xffx","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/vm2-3.11.3-through-3.11.6-native-code-execution-via-crypto-setengine","source":"disclosure@vulncheck.com"},{"url":"https://github.com/patriksimek/vm2/security/advisories/GHSA-46pr-c5wc-xffx","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2026-84975","sourceIdentifier":"security-advisories@github.com","published":"2026-09-18T18:17:17.127","lastModified":"2026-10-20T19:52:01.063","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/ssl_sock_ossl.c and pjlib/src/pj/ssl_sock_gtls.c copy DNS SubjectAltName values with string functions that recalculate their length and truncate an embedded NUL byte. With server verification enabled through --tls-verify-server for the PJSIP TLS/SIPS transport, a certificate containing a DNS SubjectAltName formed from the target hostname prefix followed by an embedded NUL and an attacker-controlled suffix can therefore be accepted for the prefix hostname. An attacker who possesses such a certificate from a trusted issuer and can intercept the connection can impersonate the target server, complete the SIP session, and receive REGISTER credentials. The mbedTLS backend is not affected because it preserves the explicit string length. No fixed version is available as of this review."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"pjsip","product":"pjproject","versions":[{"version":"<= 2.17","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":7.4,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-24T21:00:46.376266Z","id":"CVE-2026-84975","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"},{"lang":"en","value":"CWE-297"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:*","versionEndIncluding":"2.17","matchCriteriaId":"C6941BF6-97FA-4BA2-989F-AE04E676A985"}]}]}],"references":[{"url":"https://github.com/pjsip/pjproject/commit/43d3bd77bb6833eab4c493503b8d564a754ddfdd","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/pjsip/pjproject/security/advisories/GHSA-382p-87mh-r3q8","source":"security-advisories@github.com","tags":["Vendor Advisory","Mitigation"]}]}},{"cve":{"id":"CVE-2026-93964","sourceIdentifier":"cna@vuldb.com","published":"2026-09-20T06:16:50.477","lastModified":"2026-09-22T16:18:14.893","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched remotely. The exploit is now public and may be used. Endpoint only processes and echoes back the certificate the caller submits (no stored data leaked); the real risk is unauthenticated openssl processing of attacker input. The project was informed of the problem early through an issue report but has not responded yet."}],"affected":[{"source":"cna@vuldb.com","affectedData":[{"vendor":"NginxProxyManager","product":"nginx-proxy-manager","cpes":["cpe:2.3:a:nginxproxymanager:nginx-proxy-manager:*:*:*:*:*:*:*:*"],"modules":["Validate Route"],"versions":[{"version":"2.0","status":"affected"},{"version":"2.1","status":"affected"},{"version":"2.1.0","status":"affected"},{"version":"2.1.1","status":"affected"},{"version":"2.1.2","status":"affected"},{"version":"2.2","status":"affected"},{"version":"2.2.0","status":"affected"},{"version":"2.2.1","status":"affected"},{"version":"2.2.2","status":"affected"},{"version":"2.2.3","status":"affected"},{"version":"2.2.4","status":"affected"},{"version":"2.3","status":"affected"},{"version":"2.3.0","status":"affected"},{"version":"2.3.1","status":"affected"},{"version":"2.4","status":"affected"},{"version":"2.4.0","status":"affected"},{"version":"2.5","status":"affected"},{"version":"2.5.0","status":"affected"},{"version":"2.6","status":"affected"},{"version":"2.6.0","status":"affected"},{"version":"2.6.1","status":"affected"},{"version":"2.6.2","status":"affected"},{"version":"2.7","status":"affected"},{"version":"2.7.0","status":"affected"},{"version":"2.7.1","status":"affected"},{"version":"2.7.2","status":"affected"},{"version":"2.7.3","status":"affected"},{"version":"2.8","status":"affected"},{"version":"2.8.0","status":"affected"},{"version":"2.8.1","status":"affected"},{"version":"2.9","status":"affected"},{"version":"2.9.0","status":"affected"},{"version":"2.9.1","status":"affected"},{"version":"2.9.2","status":"affected"},{"version":"2.9.3","status":"affected"},{"version":"2.9.4","status":"affected"},{"version":"2.9.5","status":"affected"},{"version":"2.9.6","status":"affected"},{"version":"2.9.7","status":"affected"},{"version":"2.9.8","status":"affected"},{"version":"2.9.9","status":"affected"},{"version":"2.9.10","status":"affected"},{"version":"2.9.11","status":"affected"},{"version":"2.9.12","status":"affected"},{"version":"2.9.13","status":"affected"},{"version":"2.9.14","status":"affected"},{"version":"2.9.15","status":"affected"},{"version":"2.9.16","status":"affected"},{"version":"2.9.17","status":"affected"},{"version":"2.9.18","status":"affected"},{"version":"2.9.19","status":"affected"},{"version":"2.9.20","status":"affected"},{"version":"2.9.21","status":"affected"},{"version":"2.9.22","status":"affected"},{"version":"2.10","status":"affected"},{"version":"2.10.0","status":"affected"},{"version":"2.10.1","status":"affected"},{"version":"2.10.2","status":"affected"},{"version":"2.10.3","status":"affected"},{"version":"2.10.4","status":"affected"},{"version":"2.11","status":"affected"},{"version":"2.12","status":"affected"},{"version":"2.13","status":"affected"},{"version":"2.14.0","status":"affected"},{"version":"2.15.0","status":"affected"},{"version":"2.15.1","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-22T15:34:02.996167Z","id":"CVE-2026-93964","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cna@vuldb.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"},{"lang":"en","value":"CWE-306"}]}],"references":[{"url":"https://github.com/NginxProxyManager/nginx-proxy-manager/","source":"cna@vuldb.com"},{"url":"https://github.com/NginxProxyManager/nginx-proxy-manager/issues/5594","source":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-93964","source":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/944336","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/407923","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/407923/cti","source":"cna@vuldb.com"}]}},{"cve":{"id":"CVE-2026-89281","sourceIdentifier":"cret@cert.org","published":"2026-09-22T20:17:11.380","lastModified":"2026-09-23T17:58:00.627","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"Apache HTTP Server Project","product":"Apache Lounge Windows","versions":[{"version":"0","lessThan":"Apache 2.4.68-260920 Win64","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-23T12:32:18.493590Z","id":"CVE-2026-89281","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-732"}]}],"references":[{"url":"https://atos.net/en/lp/cybershield/a-tale-of-several-hijacks-and-what-it-taught-me-about-runtime-driven-testing","source":"cret@cert.org"},{"url":"https://httpd.apache.org/download.cgi","source":"cret@cert.org"},{"url":"https://www.apachelounge.com/viewtopic.php?t=9515","source":"cret@cert.org"}]}},{"cve":{"id":"CVE-2026-73581","sourceIdentifier":"security@apache.org","published":"2026-09-23T12:17:06.287","lastModified":"2026-09-30T15:22:34.000","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0-M1 through 9.0.121.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.26, 10.1.59, 9.0.122, which fixes the issue."}],"affected":[{"source":"security@apache.org","affectedData":[{"vendor":"Apache Software Foundation","product":"Apache Tomcat","defaultStatus":"unaffected","versions":[{"version":"11.0.0-M1","lessThanOrEqual":"11.0.25","versionType":"semver","status":"affected"},{"version":"10.1.0-M1","lessThanOrEqual":"10.1.59","versionType":"semver","status":"affected"},{"version":"9.0.0.M1","lessThanOrEqual":"9.0.121","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.100","versionType":"semver","status":"affected"},{"version":"0","lessThan":"8.5.0","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-23T15:19:35.322766Z","id":"CVE-2026-73581","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@apache.org","type":"Secondary","description":[{"lang":"en","value":"CWE-299"}]}],"references":[{"url":"https://lists.apache.org/thread/r0dj3h1pbn4wv96fhsfrnz3t6874t6do","source":"security@apache.org"},{"url":"http://www.openwall.com/lists/oss-security/2026/09/23/19","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2026-91769","sourceIdentifier":"security@php.net","published":"2026-09-25T21:17:24.913","lastModified":"2026-10-23T13:20:43.460","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once the certificate presents any service identity, so a certificate carrying a non-matching DNS SAN was still accepted when its CN matched the requested peer_name. A certificate trusted by the client for one name can therefore be used to impersonate another."}],"affected":[{"source":"security@php.net","affectedData":[{"vendor":"PHP Group","product":"PHP","defaultStatus":"unaffected","packageName":"ext-openssl","versions":[{"version":"8.2.*","lessThan":"8.2.34","versionType":"semver","status":"affected"},{"version":"8.3.*","lessThan":"8.3.35","versionType":"semver","status":"affected"},{"version":"8.4.*","lessThan":"8.4.26","versionType":"semver","status":"affected"},{"version":"8.5.*","lessThan":"8.5.11","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@php.net","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-28T12:56:47.310384Z","id":"CVE-2026-91769","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@php.net","type":"Secondary","description":[{"lang":"en","value":"CWE-297"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.2.34","matchCriteriaId":"AAFB3643-4D71-46ED-8184-DDE5FE41CD02"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.0","versionEndExcluding":"8.3.35","matchCriteriaId":"FF664EE8-D417-45A4-84DF-158F5073FDE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.4.26","matchCriteriaId":"52D4BECA-EF0D-4180-837C-AEFA7A12D243"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndExcluding":"8.5.11","matchCriteriaId":"308803C0-9FC8-40D2-8920-B83BCC48014F"}]}]}],"references":[{"url":"https://github.com/php/php-src/security/advisories/GHSA-vvx9-73fr-5jjx","source":"security@php.net","tags":["Vendor Advisory","Exploit"]}]}},{"cve":{"id":"CVE-2026-100720","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-09-26T14:16:58.230","lastModified":"2026-09-26T23:16:33.660","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer (the lowest-privileged authenticated role) uploads an SSL certificate for one of their own domains, the Certificates API add()/update() methods parse it with openssl_x509_parse() and store the issuer organization (issuer['O']) value verbatim without sanitization. Froxlor's table-listing renderer then emits scalar cells through Twig's `raw` filter, disabling HTML auto-escaping, so when an administrator or reseller opens Domains > SSL certificates the attacker-supplied issuer value executes as script in the privileged user's session. This crosses a privilege boundary from customer to admin and can result in full administrator account takeover; because a Froxlor admin controls webserver, DNS, and PHP configuration applied by a cron job running as root, the issue can be further escalated to command execution as root on the managed server. The issue is fixed in Froxlor 2.3.12."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"froxlor","product":"froxlor","defaultStatus":"unaffected","versions":[{"version":"2.0.0","lessThan":"2.3.12","versionType":"semver","status":"affected"},{"version":"2.3.12","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.3,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"PASSIVE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","baseScore":8.7,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":5.8}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-26T23:02:16.405840Z","id":"CVE-2026-100720","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"references":[{"url":"https://github.com/froxlor/froxlor/security/advisories/GHSA-89vj-gqqr-73p8","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/froxlor-before-2.3.12-stored-xss-via-ssl-certificate-issuer","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-94419","sourceIdentifier":"facts@wolfssl.com","published":"2026-09-27T09:16:36.493","lastModified":"2026-09-30T17:36:47.747","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Without NO_SESSION_CACHE_REF, wolfSSL_get_session() does not return a session object but a ClientSession reference of the form {row, index, hash(sessionID)} into the process-global SessionCache, and ClientSessionToSession() validates it against that hash alone. Because the TLS 1.2 session ID is chosen by the server and sent in clear, AddSessionToCache() matches any other server's session on the same ID and overwrites the client-side entry with that server's master secret, cipher suite and version, while the handle continues to resolve; nothing on the write path compares the peer, the application's server ID or the WOLFSSL_CTX. Resuming through the handle then produces an abbreviated handshake in which no Certificate message is sent, so neither chain verification nor wolfSSL_check_domain_name() runs, and the attacker is accepted as the original server for the whole of that connection. Affected builds are those leaving NO_SESSION_CACHE_REF, NO_SESSION_CACHE, NO_CLIENT_CACHE and TITAN_SESSION_CACHE all undefined, which includes a plain ./configure, --enable-opensslextra and --enable-opensslall; fifteen integration options define NO_SESSION_CACHE_REF and are therefore not affected, among them --enable-all, --enable-distro, --enable-curl, --enable-nginx, --enable-haproxy, --enable-stunnel, --enable-wpas and the rest of the OPENSSL_COMPATIBLE_DEFAULTS family, and --enable-leanpsk, --enable-leantls, --enable-lowresource and --enable-tinytls13 disable the cache outright. The application must use the legacy reference flow, wolfSSL_get_session() or SSL_get_session() followed by wolfSSL_set_session(); wolfSSL_get1_session() returns the session object itself and is not affected, nor are wolfSSL_SetServerID() lookups. Only TLS 1.2 and below and DTLS 1.2 and below are reachable, since TLS 1.3 and ticket resumption with an empty ServerHello session ID both use a client-chosen cache key. The poisoned entry lives in the process-global cache, so it crosses WOLFSSL_CTX boundaries and persists until the entry is evicted or the session times out, 500 seconds by default. Releases v5.3.0 through v5.9.2 are affected; the fix adds a per-write generation counter to the cache and raises WOLFSSL_CACHE_VERSION from 2 to 3, so a cache persisted by an older build is rejected by a fixed one."}],"affected":[{"source":"facts@wolfssl.com","affectedData":[{"vendor":"wolfSSL","product":"wolfSSL","defaultStatus":"unaffected","versions":[{"version":"5.3.0","lessThanOrEqual":"5.9.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"facts@wolfssl.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":2.3,"baseSeverity":"LOW","attackVector":"ADJACENT","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T16:48:31.953089Z","id":"CVE-2026-94419","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"facts@wolfssl.com","type":"Secondary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.9.2","matchCriteriaId":"A7AD4076-252F-4151-8554-C6A4AEFBA5EC"}]}]}],"references":[{"url":"https://github.com/wolfSSL/wolfssl/pull/11500","source":"facts@wolfssl.com","tags":["Issue Tracking","Patch"]}]}},{"cve":{"id":"CVE-2026-93302","sourceIdentifier":"facts@wolfssl.com","published":"2026-09-27T10:16:59.417","lastModified":"2026-10-02T18:57:08.567","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected builds are any that enable the macro WOLFSSL_TRUST_PEER_CERT and load CA certificates with wolfSSL_CTX_trust_peer_cert() or wolfSSL_trust_peer_cert(). The peer must know the certificates being loaded to either of those APIs to take advantage of the issue. When OPENSSL_COMPATIBLE_DEFAULTS is also defined this widens the affected API to include all CA certificate loading. Both macros are defined when using autoconf builds such as (nginx, haproxy, stunnel, wpas, apache httpd, hitch, bind, rsyslog, ffmpeg, all, distro). When the certificate is listed as a trusted peer certificate the issue previously allowed for a malicious (D)TLS server to bypass authentication once knowing which CA’s the client would accept. This also affects mutual authentication cases where the client knows which CA’s the server has loaded. If building with any of these configurations and using (D)TLS where the loaded CA’s could be known and authentication of the peer is desired, users should either: update to the latest wolfSSL version, apply the fix patch, or use the configure flag --disable-openssl-compatible-defaults and not load CA’s with wolfSSL_CTX_trust_peer_cert() or wolfSSL_trust_peer_cert() to mitigate the issue."}],"affected":[{"source":"facts@wolfssl.com","affectedData":[{"vendor":"wolfSSL","product":"wolfSSL","defaultStatus":"unaffected","versions":[{"version":"5.3.0","lessThanOrEqual":"5.9.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"facts@wolfssl.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T16:40:48.554537Z","id":"CVE-2026-93302","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"facts@wolfssl.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3.0","versionEndIncluding":"5.9.2","matchCriteriaId":"A7AD4076-252F-4151-8554-C6A4AEFBA5EC"}]}]}],"references":[{"url":"https://github.com/wolfSSL/wolfssl/commit/22bcd51d553eaac1de37bee91fdac80cc47961e1","source":"facts@wolfssl.com","tags":["Patch"]}]}},{"cve":{"id":"CVE-2026-35189","sourceIdentifier":"openssl-security@openssl.org","published":"2026-09-29T16:17:07.330","lastModified":"2026-10-08T01:01:54.577","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A certificate with many nameRelativeToCRLIssuer CRL\ndistribution points causes disproportionate heap growth when OpenSSL caches\nX.509 extensions.\n\nImpact summary: Receiving a crafted certificate from a malicious peer can lead\nto significant memory pressure and possible Denial of Service in clients or\nin servers that solicit client certificates.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: A certificate or a set of certificates that fits under the limit for\nsize of certificates accepted from the peer (~100 KiB) can result in allocation\nof several hundred MiB of resident memory on the receiving side\nduring a normal TLS handshake.  This may be enough to crash the client or\nserver, if multiple concurrent connections lead to similarly large memory\nallocations.\n\nThe fix postpones processing of the CRL distribution points extensions in\ncertificates to the time when the processed value is required for CRL processing.\nThis avoids keeping large memory allocations for a long time when such\ncertificates are received.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.3","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.5","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.9","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.8","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.23","versionType":"semver","status":"affected"},{"version":"1.1.1","lessThan":"1.1.1zj","versionType":"custom","status":"affected"},{"version":"1.0.2","lessThan":"1.0.2zs","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-30T19:36:26.041392Z","id":"CVE-2026-35189","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.2","versionEndExcluding":"1.0.2zs","matchCriteriaId":"B6D38C82-B694-4F0F-B042-AC83B014968B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.1","versionEndExcluding":"1.1.1zj","matchCriteriaId":"AB24C69B-F66B-4BC6-99E8-4D3088607B00"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.23","matchCriteriaId":"C9AFA409-BE77-40FB-8191-3405AC8F52C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.8","matchCriteriaId":"707E1EC7-0538-4F9F-96CB-C89FECC1F3ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.9","matchCriteriaId":"B822E02B-8728-4C34-98BC-52D0A0A735B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.5","matchCriteriaId":"96C892B6-618B-4CB9-85B6-76C641D17532"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.3","matchCriteriaId":"BC4A99CC-483D-4C81-A95F-6AEB2BF1B500"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260929.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-35191","sourceIdentifier":"openssl-security@openssl.org","published":"2026-09-29T16:17:07.490","lastModified":"2026-10-08T01:02:06.293","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: The OpenSSL QUIC server, when configured to not preform address\nvalidation, can be forced to count incoming packets multiple times in its\nunvalidated credit computation, leading to a violation of the RFC 9000\nunvalidated connection amplification limit of 3 times the amount of data\nreceived.\n\nImpact summary: A remote attacker able to spoof packets to a server using the\nOpenSSL QUIC implementation might use the server for an amplification of\na DDoS attack.\n\nCWE: CWE-440: Expected Behavior Violation \n\nDescription: OpenSSL's QUIC stack, when operating as a server, enforces client\naddress validation (RFC 9000, Section 8), to confirm the peer address is not\nused for a traffic amplification attack.  If this feature is disabled on the\nserver, the QUIC stack limits the amount of server data that can be sent to 3\ntimes the amount of data received from the peer address, until such time as the\nTLS handshake is completed.\n\nThe OpenSSL QUIC server, when operating in non-validation mode, adds the\nlength of the whole datagram received to the unvalidated credit limit when\nprocessing each QUIC packet in the datagram. A remote peer may,\nafter establishing a connection with an initial client hello frame, send a\nsubsequent datagram containing multiple QUIC packets, leading the server to\naccount the entire datagram length for each packet in the datagram, resulting\nin the server believing that the peer has sent more data than it actually has,\nthereby violating the 3x amplification limit mandated by the RFC.\n\nFIPS impact: no\nAs the QUIC stack lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.3","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.5","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.9","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-30T19:35:19.683843Z","id":"CVE-2026-35191","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-440"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.9","matchCriteriaId":"B822E02B-8728-4C34-98BC-52D0A0A735B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.5","matchCriteriaId":"96C892B6-618B-4CB9-85B6-76C641D17532"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.3","matchCriteriaId":"BC4A99CC-483D-4C81-A95F-6AEB2BF1B500"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/0fe4442d4f8ea3af8a174046dae176e0d4717239","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/2de4c35fb13fc58f43fd8dc1d261700472ce72e5","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/e44292e58b090014232ef75bd400393851b24d1a","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260929.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-42772","sourceIdentifier":"openssl-security@openssl.org","published":"2026-09-29T16:17:07.640","lastModified":"2026-10-08T01:18:57.547","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: The QUIC stream reassembly algorithm performance deteriorates\nprogressively as packets are arriving out of order. The worst case has\na quadratic complexity proportional to the number of stream frames kept in\nthe buffer for the received stream data.\n\nImpact summary: A remote QUIC peer that completes the handshake can create\na connection-scoped CPU pressure and potentially a Denial of Service using\ncompliant STREAM frames inside the advertised receive window, with low\nattacker bandwidth.\n\nCWE: CWE-407: Inefficient Algorithmic Complexity\n\nDescription: OpenSSL manages received QUIC stream fragments using a\ndoubly-linked list. While it optimizes for append operations (at the end of\nthe list), it falls back to a head-to-tail linear search for any fragment\nthat does not immediately follow the current `tail`.\n\nBy manipulating the sequence of offsets, an attacker can force the server\nto perform O(n^2) operations, consuming excessive CPU time for the\nQUIC process.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.3","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.5","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.9","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-30T19:35:54.157005Z","id":"CVE-2026-42772","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-407"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.8","matchCriteriaId":"707E1EC7-0538-4F9F-96CB-C89FECC1F3ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.9","matchCriteriaId":"B822E02B-8728-4C34-98BC-52D0A0A735B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.5","matchCriteriaId":"96C892B6-618B-4CB9-85B6-76C641D17532"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.3","matchCriteriaId":"BC4A99CC-483D-4C81-A95F-6AEB2BF1B500"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260929.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-54873","sourceIdentifier":"openssl-security@openssl.org","published":"2026-09-29T16:17:08.763","lastModified":"2026-10-08T01:19:18.200","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: QUIC process may keep memory for QUIC packet\nbuffer for much longer period than necessary.\n\nImpact summary: Remote peer can exploit this vulnerability\nby sending maliciously crafted packets, making the local\nQUIC stack to keep the memory for packet buffers allocated.\nThe time for which the memory remains allocated is entirely\nunder the control of the potentially malicious remote peer.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: To save copy operation from the packet buffer to the\nstream reassemble buffer the QUIC stack leaves the stream data\non the packet buffer waiting to be copied to a buffer provided\nby the local receiving application. The QUIC stack releases\na reference to the packet buffer only after the data are copied\nto the application buffer. This design is more efficient for\nlegitimate data transfers but enables an attacker to allocate a lot\nmore memory than actually required by the data kept in the receiving\nstream buffer.\n\nTo mitigate the vulnerability, the QUIC stack now calculates\nand monitors memory overhead for every stream. The memory overhead\nfor a single stream frame is calculated as a difference between the\nsize of the whole packet that carries the stream frame and the size\nof the stream frame itself. The memory overhead for a single stream\nframe is added to the total (cumulative) memory overhead QUIC stack\nkeeps for each stream. Once the cumulative memory overhead exceeds\n64kB, the QUIC stack moves the stream frame data from the packet\nbuffer to the stream buffer, starting with the next packet received.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.3","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.5","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.9","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-30T19:18:10.966747Z","id":"CVE-2026-54873","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.8","matchCriteriaId":"707E1EC7-0538-4F9F-96CB-C89FECC1F3ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.9","matchCriteriaId":"B822E02B-8728-4C34-98BC-52D0A0A735B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.5","matchCriteriaId":"96C892B6-618B-4CB9-85B6-76C641D17532"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.3","matchCriteriaId":"BC4A99CC-483D-4C81-A95F-6AEB2BF1B500"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/1f643b8bc735487b500a1f68a7fb3a22d5e38e23","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/279e7ee1392af98785746788168749491c74bd53","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/3ea6213e050e938ecbbf8c4eff32bec2736780eb","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7127fb10888b49711c63128a09e524c0d2d5d0b2","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260929.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-54875","sourceIdentifier":"openssl-security@openssl.org","published":"2026-09-29T16:17:08.920","lastModified":"2026-10-08T01:19:29.883","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A non-constant-time optimized implementation of scalar\npoint multiplication is used for SM2 private key operations on ARM64 and\nRISC-V platforms.\n\nImpact summary: An attacker able to measure the time taken by, or to observe\nthe cache-line access pattern of SM2 signing or decryption on an affected\nplatform can learn information about the secret scalar.\n\nCWE: CWE-208: Observable Timing Discrepancy\n\nDescription: On ARM64 and RISC-V processors, the SM2 curve uses an optimized\nscalar multiplication implementation whose conditional branches and table\nlook ups are chosen according to the bits of the secret scalar. The execution\ntime and the cache-access pattern therefore depend on the long-term private\nkey (during SM2 decryption) or the per-signature nonce (during SM2 signature\ngeneration), forming a timing and cache side-channel.\n\nFIPS Impact: no\nSM2 is not a FIPS algorithm and the optimized SM2 implementation is not part\nof the FIPS module.\n\nOpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and\nRISC-V.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.3.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.5.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.9.\nOpenSSL 3.4 users should upgrade to OpenSSL 3.4.8.\n\nThis issue was reported on 2 May 2026 by Abhinav Agarwal.\nIt was independently reported on 6 June 2026 by Feng Xue.\nThe fix was developed by Igor Ustinov.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Abhinav Agarwal, Feng Xue\nFixed by: Igor Ustinov"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.3","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.5","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.9","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T17:17:05.164162Z","id":"CVE-2026-54875","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-208"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.8","matchCriteriaId":"707E1EC7-0538-4F9F-96CB-C89FECC1F3ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.9","matchCriteriaId":"B822E02B-8728-4C34-98BC-52D0A0A735B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.5","matchCriteriaId":"96C892B6-618B-4CB9-85B6-76C641D17532"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.3","matchCriteriaId":"BC4A99CC-483D-4C81-A95F-6AEB2BF1B500"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/3f01bbc28f7e08211fcdc797fd43816504f94257","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/469f3e42629f4a0b5631796e20c66c92c138a3e8","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/9794ed473764839275cb701b4850f3c24d929c28","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/dddad955d5ff3e9507619cf4e0f13e9988e2197c","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260929.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-72897","sourceIdentifier":"openssl-security@openssl.org","published":"2026-09-29T16:17:09.903","lastModified":"2026-10-08T01:19:41.567","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a\nconnection to a different SSL_CTX part way through a handshake may access\nmemory beyond the end of an internal array if the replacement context knows\nabout more provider signature algorithms than the context the connection was\ncreated from. Applications which never call SSL_set_SSL_CTX() are not\naffected.\n\nImpact summary: A remote peer may be able to cause a small out-of-bounds\nread, and in some circumstances a fixed-value out-of-bounds write, on the\nserver heap. This may lead to a Denial of Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: A TLS connection records how many certificate slots it has\nwhen it is created, taken from the SSL_CTX that created it: the built-in\ncertificate types plus one slot for each provider TLS-SIGALG entry that\ncontext was aware of. That count sizes an internal array of per-slot\ncertificate validity flags.\n\nAn application may replace a connection's SSL_CTX part way through the\nhandshake by calling SSL_set_SSL_CTX(), most commonly from a servername\ncallback in order to serve a different virtual host. Doing so did not\nrefresh the recorded count. A provider signature algorithm's slot index is\nits position in the list of whichever context resolves it, so if the\nreplacement context is aware of more of them than the original, an\nalgorithm offered by the peer can resolve to an index beyond the end of the\narray. Processing the peer's signature algorithms then reads one four byte\nword past the end for each such algorithm and, where the word read is zero,\nwrites a fixed value over it. A peer offering many of them can corrupt heap\nmetadata and abort the process.\n\nOnly provider signature algorithms which occupy one of the excess slots,\nand which the server also has configured, have this effect. Codepoints the\nreplacement context does not recognise are discarded without being resolved\nto a slot, and provider signature algorithms are usable only from TLS 1.3.\n\nThe two contexts must therefore be aware of different numbers of provider\nsignature algorithms, which requires separate library contexts, a provider\nloaded between the two being created, or providers which differ in what\nthey advertise - in 4.0, for example, the default provider advertises SM2\nwhere the FIPS provider does not. A deployment meeting the condition is\nalso unable to negotiate the affected algorithms with legitimate clients,\nsince the same stale count hides the corresponding certificates, so the\nmisconfiguration is likely to be noticed. For that reason, and because the\nconfiguration is not the default, this issue has been assessed as Low\nseverity.\n\nFIPS impact: no\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.3","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.5","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.9","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T17:16:29.979390Z","id":"CVE-2026-72897","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.8","matchCriteriaId":"707E1EC7-0538-4F9F-96CB-C89FECC1F3ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.9","matchCriteriaId":"B822E02B-8728-4C34-98BC-52D0A0A735B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.5","matchCriteriaId":"96C892B6-618B-4CB9-85B6-76C641D17532"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.3","matchCriteriaId":"BC4A99CC-483D-4C81-A95F-6AEB2BF1B500"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/00646e5085a0d12d29e0d2f9b9bc5f7111a50922","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/4135f553c9d3ba4a09fe752f5d30af2a6a092b2e","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/9c54d209486f6b1ad79fe2179c40f13200fa4f61","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/e87ed26b298a74d8ba61a53e9c7bcd1acac6b814","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260929.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-75804","sourceIdentifier":"openssl-security@openssl.org","published":"2026-09-29T16:17:10.887","lastModified":"2026-10-08T01:20:01.250","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: OpenSSL QUIC stack does not enforce connection\nlevel flow control for streams. Remote peers may send more bytes\nas long as they fit within the stream flow control limits.\n\nImpact summary: A malicious remote peer may exploit the lack of connection\nflow control for streams to make the QUIC stack receive ~100MB of memory\ninstead of 768 KiB (default flow control window size).\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The local QUIC stack advertises two flow control limits\nto its remote peer: stream flow control limit and connection flow\ncontrol limit. The remote peer must follow both limits when transmitting\nstream data.\n\nWhenever the local QUIC stack receives a stream frame, it validates\nthat the size of the received stream frame stays within flow control limits.\nIf either limit is exceeded (stream level or connection level), then\nthe QUIC stack must close the connection with a flow control error.\n\nThe vulnerable OpenSSL QUIC stack enforces the stream-level but not\nthe connection-level limit. To exploit the issue, three conditions must be met:\n  - the remote peer opens several streams\n  - each stream must stay within the stream-level flow control limit\n  - there must be no zero-offset byte sent on any of the streams\n    (to prevent the vulnerable QUIC stack from consuming data).\nBy meeting the conditions above, the remote peer may make the local stack\nallocate 2 x MAX_STREAMS x (stream flow control limit) bytes\nof memory. MAX_STREAMS defaults to 100, and the limit applies to both\nbidirectional and unidirectional streams, making it 200 in total. The default\nflow control window for a stream is 512kB. The remote peer may\nforce the vulnerable QUIC stack to allocate 100MB of heap per connection.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.3","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.5","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.9","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T17:15:09.218928Z","id":"CVE-2026-75804","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.8","matchCriteriaId":"707E1EC7-0538-4F9F-96CB-C89FECC1F3ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.9","matchCriteriaId":"B822E02B-8728-4C34-98BC-52D0A0A735B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.5","matchCriteriaId":"96C892B6-618B-4CB9-85B6-76C641D17532"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.3","matchCriteriaId":"BC4A99CC-483D-4C81-A95F-6AEB2BF1B500"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/2e8f54666b3fb7b05ff5f58aa6cac9285163654e","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/4533ee8a5686c953ed3b644738ac4bdf20806538","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/64d3102fb5b54311e92517f26ba00169d719e74a","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/f9eaecf5bdd6692da052bc65b0332af2a938ac03","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260929.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-75805","sourceIdentifier":"openssl-security@openssl.org","published":"2026-09-29T16:17:11.063","lastModified":"2026-10-08T01:20:24.147","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A CMP client that requests certificate revocation on the basis\nof a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when\nprocessing a crafted revocation response. \n\nImpact summary: The NULL pointer dereference happens on a read which \nleads to a crash and a Denial of Service for the affected client application.\n\nCWE: CWE-476: NULL-pointer dereference\n\nDescription: A CMP client revoking a certificate has to tell the server which\ncertificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the\ncertificate itself or its issuer name and serial number. This is\n'openssl cmp -cmd rr -csr <file>' on the command line, or\nOSSL_CMP_exec_RR_ses() with the certificate supplied via\nOSSL_CMP_CTX_set1_p10CSR() through the API.\n\nA CSR does not contain the issuer name and serial number of the certificate,\nso the client does not send them. A server may optionally name the\ncertificate it revoked in its response, and the client then compares that\nname against what it sent. Having sent neither an issuer name nor a serial\nnumber, it has nothing to compare against, and a server returning a specially\ncrafted name causes the client to read from a NULL pointer and crash.\n\nThe revocation response is checked for valid message protection before\nthe affected code is reached, so an attacker must be a malicious or\ncompromised CMP server, or a man-in-the-middle in possession of the\nsecret used for message protection. Clients that identify the certificate\nto be revoked by a certificate or by issuer and serial number rather\nthan by a PKCS#10 CSR are not affected.\n\nFIPS impact: no\nNo FIPS modules are affected by this issue, as the CMP protocol\nimplementation is outside the OpenSSL FIPS module boundary."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.3","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.5","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.9","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.8","versionType":"semver","status":"affected"},{"version":"3.0.0","lessThan":"3.0.23","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T16:54:03.315064Z","id":"CVE-2026-75805","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.23","matchCriteriaId":"C9AFA409-BE77-40FB-8191-3405AC8F52C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.8","matchCriteriaId":"707E1EC7-0538-4F9F-96CB-C89FECC1F3ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.9","matchCriteriaId":"B822E02B-8728-4C34-98BC-52D0A0A735B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.5","matchCriteriaId":"96C892B6-618B-4CB9-85B6-76C641D17532"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.3","matchCriteriaId":"BC4A99CC-483D-4C81-A95F-6AEB2BF1B500"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/7588db7fef14209c3caa3a101d11a02006b19166","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/7ca0ccb5172a577e9b87267d77bfe21e5481a5e7","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/9eb2a8a9b86136cdb39d6d7d50644dd66941cdc3","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/abf02872a4b71767ecc72293424420f5b009190f","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260929.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-84783","sourceIdentifier":"openssl-security@openssl.org","published":"2026-09-29T16:17:12.653","lastModified":"2026-10-08T01:21:13.440","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: The first concurrent use of the same X.509 certificate by\nseveral threads may cause its cached extension data to be freed while\nanother thread is still using it.\n\nImpact summary: A remote, unauthenticated peer could crash a multi-threaded\nTLS client, or a multi-threaded TLS server that requests client\ncertificates, if the first certificate chains built to the same trusted CA\ncertificate are built by several connections at the same time. This is a\nuse-after-free read, which is likely to crash the process, resulting in a\nDenial of Service.\n\nCWE: CWE-416: Use After Free\n\nDescription: OpenSSL caches the decoded values of a certificate's X.509v3\nextensions inside the X509 object the first time they are needed. In\nOpenSSL 4.0 this cache is built in two phases: the extension values are\ncomputed while holding a read lock on the certificate, and the results are\nthen installed into the certificate under a write lock. Because a read lock\ndoes not exclude other readers, several threads can compute the cache for\nthe same certificate at the same time. Each thread that subsequently\nacquires the write lock installs its own results and frees the values\ninstalled by the thread before it, even though that earlier thread has\nalready marked the cache as complete and may have returned pointers into it\nto its caller. A caller still using those pointers then reads freed memory.\n\nAny certificate shared between threads is exposed the first time its\nextensions are decoded. In TLS the certificates at risk are the trusted CA\ncertificates supplied for chain verification, by whatever means, since these\nare shared by every connection and their extensions are decoded and cached\nthe first time a chain is built to them. Certificates sent by the peer are\ndecoded separately for each connection and are not shared, so they are not\naffected. In a TLS client verifying server certificates, or a TLS server\nthat requests and verifies client certificates, the use-after-free could\nonly occur if the first chains built to the same trusted CA are built by\nseveral connections at the same time.\n\nFIPS impact: no\nThe FIPS module is not affected as X.509 certificate handling is outside\nof the OpenSSL FIPS module boundary.\n\nOpenSSL 4.0 is vulnerable to this issue.\n\nOpenSSL 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are not affected by this issue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.3.\n\nThis issue was reported on 27 August 2026 by Tim Becker (Xint.io) and\nindependently in a public report on 31 August 2026 by aydinmercan.\n\nThe fix has been developed by Bob Beck.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Tim Becker (Xint.io), aydinmercan\nFixed by: Bob Beck"}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T16:42:36.722506Z","id":"CVE-2026-84783","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.3","matchCriteriaId":"BC4A99CC-483D-4C81-A95F-6AEB2BF1B500"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/de97a1a54f43edefd43b5084ecac54ecadb33081","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260929.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-84784","sourceIdentifier":"openssl-security@openssl.org","published":"2026-09-29T16:17:12.810","lastModified":"2026-10-08T01:21:22.543","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: A malicious remote peer may flood the local QUIC\nstack with NEW_CONNECTION_ID frames by avoiding a limit check on\nhow many connection IDs the remote QUIC stack can use.\n\nImpact summary: The local QUIC stack sends a RETIRE_CONN_ID frame\nfor every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID\nframe is dispatched via the Control Frame Queue (CFQ). If the remote\npeer also withholds ACKs, then it can force the local stack\nto allocate ~400MB (depending on ACK delay).\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism\nby which a remote peer can notify the local QUIC stack to change the\ndestination connection ID (a.k.a. CID) the local stack uses to\nidentify the connection at the remote peer. Each CID is associated\nwith a sequence number. The sequence number is transmitted\nin NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID\nwhich is being either associated with a connection or retired.\n\nThe remote peer sends a NEW_CONNECTION_ID frame to let the local stack know\na new CID is being associated with an existing connection. The\nNEW_CONNECTION_ID frame carries the new CID, its sequence number, and the\nretire-prior-to number. The retire-prior-to identifies existing\nCIDs that are to be retired. The local QUIC stack must send a\nRETIRE_CONNECTION_ID for every destination CID whose sequence number\nis less than retire-prior-to. The CID becomes retired after the\nlocal stack receives an ACK for its RETIRE_CONNECTION_ID frame.\n\nAlthough the OpenSSL QUIC stack supports at most one destination CID\nfor every connection, it can be tricked into processing more than\none RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC\nstack currently retires the destination CID as soon as it receives\nthe NEW_CONNECTION_ID, while in fact the destination CID must\nbe retired after an ACK for the RETIRE_CONNECTION_ID frame is received.\nCorrecting the flawed logic also fixes the backlog growth.\n\n[1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}],"affected":[{"source":"openssl-security@openssl.org","affectedData":[{"vendor":"OpenSSL","product":"OpenSSL","defaultStatus":"unaffected","versions":[{"version":"4.0.0","lessThan":"4.0.3","versionType":"semver","status":"affected"},{"version":"3.6.0","lessThan":"3.6.5","versionType":"semver","status":"affected"},{"version":"3.5.0","lessThan":"3.5.9","versionType":"semver","status":"affected"},{"version":"3.4.0","lessThan":"3.4.8","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-29T16:43:47.766260Z","id":"CVE-2026-84784","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.4.0","versionEndExcluding":"3.4.8","matchCriteriaId":"707E1EC7-0538-4F9F-96CB-C89FECC1F3ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.5.0","versionEndExcluding":"3.5.9","matchCriteriaId":"B822E02B-8728-4C34-98BC-52D0A0A735B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6.0","versionEndExcluding":"3.6.5","matchCriteriaId":"96C892B6-618B-4CB9-85B6-76C641D17532"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.3","matchCriteriaId":"BC4A99CC-483D-4C81-A95F-6AEB2BF1B500"}]}]}],"references":[{"url":"https://github.com/openssl/openssl/commit/4685c914b0d410b1034f40b547c95bc95e7a380a","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/9a30fe0fba195c14e5b87bf93c0d0fdb70373806","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/dba3c48d653c64fcbc9070a17a0ee2b3e2f3af1f","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://github.com/openssl/openssl/commit/e9e5155833fa968bee50024bf9ca3a185ab599fe","source":"openssl-security@openssl.org","tags":["Patch"]},{"url":"https://openssl-library.org/news/secadv/20260929.txt","source":"openssl-security@openssl.org","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2026-79900","sourceIdentifier":"df4dee71-de3a-4139-9588-11b62fe6c0ff","published":"2026-10-01T15:17:31.920","lastModified":"2026-10-01T20:34:26.287","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"boks_ksllogsd accepts a checksum algorithm name in the MD field of an authenticated KSL start message. Affected releases verify that OpenSSL recognizes the digest name but do not verify that the value fits in a fixed 16-byte checksum context field before copying it. An authenticated KSL client can supply an oversized, OpenSSL-recognized digest name and write beyond the end of the heap allocation."}],"affected":[{"source":"df4dee71-de3a-4139-9588-11b62fe6c0ff","affectedData":[{"vendor":"Fortra","product":"BoKS Manager boks-server","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"8.1.0.24","versionType":"semver","status":"affected"},{"version":"0","lessThan":"9.0.0.7","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"df4dee71-de3a-4139-9588-11b62fe6c0ff","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-01T14:41:25.553335Z","id":"CVE-2026-79900","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"df4dee71-de3a-4139-9588-11b62fe6c0ff","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"references":[{"url":"https://www.fortra.com/security/advisories/product-security/fi-2026-013","source":"df4dee71-de3a-4139-9588-11b62fe6c0ff"}]}},{"cve":{"id":"CVE-2026-105794","sourceIdentifier":"security-advisories@github.com","published":"2026-10-06T15:17:16.260","lastModified":"2026-10-06T18:16:47.073","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certificate matches the intended target server hostname. An on-path attacker can therefore present a certificate that does not match the intended target hostname and spoof the server in a man-in-the-middle attack. The Schannel backend is not affected. This issue is fixed in versions 2.4.20, 2.5.11, and 2.6.1."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"microsoft","product":"msquic","versions":[{"version":"< 2.4.20","status":"affected"},{"version":">= 2.5.0, < 2.5.11","status":"affected"},{"version":">= 2.6.0, < 2.6.1","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-06T17:34:05.356189Z","id":"CVE-2026-105794","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"references":[{"url":"https://github.com/microsoft/msquic/commit/0591586443cc73a2d2cfb679527d91a144b4a412","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/msquic/commit/508e811370df93e2ad848f5c78347d4fe4f65a91","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/msquic/commit/90fd45498bf9b506b8556fb407088688474d6c81","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/msquic/commit/a01333cf7c2659cce0ff03ef3f21e1ff15bb5b83","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/msquic/pull/6274","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/msquic/pull/6275","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/msquic/pull/6276","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/msquic/pull/6277","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/msquic/releases/tag/v2.4.20","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/msquic/releases/tag/v2.5.11","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/msquic/releases/tag/v2.6.1","source":"security-advisories@github.com"},{"url":"https://github.com/microsoft/msquic/security/advisories/GHSA-w5f4-fx9m-m4q7","source":"security-advisories@github.com"}]}},{"cve":{"id":"CVE-2026-113812","sourceIdentifier":"9b29abf9-4ab0-4765-b253-1875cd9b441e","published":"2026-10-20T22:19:30.697","lastModified":"2026-10-22T17:21:57.293","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates.\n\nThe bundle includes \"emSign ECC Root CA - G3\", which provides a trust path for intermediate certificates whose private keys are publicly available.\n\nAn attacker able to intercept or redirect client traffic may use these keys to impersonate a TLS server.\n\nLWP, HTTP::Tiny and other clients normally use IO::Socket::SSL, which looks for CA certificates in OpenSSL's default locations before falling back to Mozilla::CA.\n\nConfiguration and environment variables can override this selection. Users should check which CA store their client uses. If it uses the system store, check for and install the operating system vendor's updates for this incident."}],"affected":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","affectedData":[{"defaultStatus":"unaffected","collectionURL":"https://cpan.org/modules","packageName":"Mozilla-CA","modules":["Mozilla::CA"],"programFiles":["lib/Mozilla/CA/cacert.pem"],"repo":"https://github.com/libwww-perl/Mozilla-CA","packageURL":"pkg:cpan/Mozilla-CA","versions":[{"version":"0","lessThan":"20261020","versionType":"custom","status":"affected"}]}]}],"metrics":{},"weaknesses":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2083449","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"url":"https://emudhra.we-have-a-problem.com/","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"url":"https://metacpan.org/release/LWP/Mozilla-CA-20261020/changes","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"url":"https://www.openwall.com/lists/oss-security/2026/10/20/1","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/20/36","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2026-116540","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-10-26T16:17:19.377","lastModified":"2026-10-26T17:17:27.187","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssl_tlsext_ticket_key_cb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed HMAC keys, crashing or corrupting ticket processing."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"netty","product":"netty-tcnative","defaultStatus":"unaffected","collectionURL":"https://repo1.maven.org/maven2/io/netty/netty-tcnative/","packageName":"io.netty:netty-tcnative","repo":"https://github.com/netty/netty-tcnative","packageURL":"pkg:maven/io.netty/netty-tcnative","versions":[{"version":"2.0.66.Final","lessThan":"2.0.84.Final","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-26T15:38:07.789293Z","id":"CVE-2026-116540","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"references":[{"url":"https://github.com/netty/netty-tcnative","source":"disclosure@vulncheck.com"},{"url":"https://github.com/netty/netty-tcnative/blob/netty-tcnative-parent-2.0.83.Final/openssl-dynamic/src/main/c/sslcontext.c#L1365","source":"disclosure@vulncheck.com"},{"url":"https://github.com/netty/netty-tcnative/commit/59662a8b07a9a7623ae1bc472f5751f31c81a118","source":"disclosure@vulncheck.com"},{"url":"https://github.com/netty/netty-tcnative/releases/tag/netty-tcnative-parent-2.0.84.Final","source":"disclosure@vulncheck.com"},{"url":"https://github.com/netty/netty-tcnative/security/advisories/GHSA-mmc8-vg2v-fvvw","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/netty-tcnative-2.0.66-final-before-2.0.84-final-use-after-free-in-session-ticket-callback","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-105031","sourceIdentifier":"security@apache.org","published":"2026-10-29T11:17:24.290","lastModified":"2026-10-29T15:43:33.310","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_trusted_ca_db() & pn_tls_config_set_trusted_certs() APIs added to rather than replaced the default system trust anchors. Leading to potentially trusting unexpected peer certificates.\n\n\n\nThis can be worked around by setting the SSL_CERT_FILE environment variable for the application to /dev/null.\n\n\n\nThis issue does not affect the Win32 SChannel TLS implementation.\n\n\n\nThis issue affects Apache Qpid Proton C: through 0.40.0.\n\n\n\nUsers are recommended to upgrade to version 0.41.1, which fixes the issue."}],"affected":[{"source":"security@apache.org","affectedData":[{"vendor":"Apache Software Foundation","product":"Apache Qpid Proton C","defaultStatus":"unaffected","packageURL":"pkg:software-id/apache.org/qpid-proton","versions":[{"version":"0","lessThanOrEqual":"0.40.0","versionType":"semver","status":"affected"}]}]}],"metrics":{},"weaknesses":[{"source":"security@apache.org","type":"Secondary","description":[{"lang":"en","value":"CWE-295"}]}],"references":[{"url":"https://lists.apache.org/thread.html/lc10nrjt2dwcjjhrsgoyy5tqkntsnor4","source":"security@apache.org"},{"url":"http://www.openwall.com/lists/oss-security/2026/10/28/22","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}