openssl - security update

Fixed packages 1

Vulnerabilities 9

• Unscored —
  CVE-2014-3505 EPSS 46%

  Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n,…

  openssl openssl Debian Ubuntu
  Aug 13, 2014
• Unscored —
  CVE-2014-3506 EPSS 46%

  d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allo…

  openssl openssl Debian Ubuntu
  Aug 13, 2014
• Unscored —
  CVE-2014-3507 Public exploit EPSS 55%

  Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 bef…

  openssl openssl Debian Ubuntu
  Aug 13, 2014
• Unscored —
  CVE-2014-3508 EPSS 25%

  The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 be…

  openssl openssl Debian Ubuntu
  Aug 13, 2014
• Unscored —
  CVE-2014-3509 EPSS 13%

  Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before…

  openssl openssl Debian Ubuntu
  Aug 13, 2014
• Unscored —
  CVE-2014-3510 EPSS 18%

  The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1…

  openssl openssl Debian Ubuntu
  Aug 13, 2014
• Unscored —
  CVE-2014-3511 EPSS 14%

  The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to …

  openssl openssl Debian Ubuntu
  Aug 13, 2014
• Unscored —
  CVE-2014-3512 EPSS 74%

  Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote…

  openssl openssl Debian Ubuntu
  Aug 13, 2014
• Unscored —
  CVE-2014-5139 Public exploit EPSS 16%

  The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a de…

  openssl openssl Debian Ubuntu
  Aug 13, 2014