Skip to content
OpenAdvisories
Medium WID-SEC-2024-0208 3 CVEs

OpenSSL: Mehrere Schwachstellen

Published Nov 10, 2016 · Updated Jan 29, 2024 · Revision 30 · de-DE

Vendor: Cisco Vendor: Dell Vendor: Fortinet Vendor: FreeBSD Vendor: HPE Vendor: Juniper Networks Vendor: NETAPP Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: FortiOS Product: FortiOS < 5.4.6 Product: FortiOS < 5.6.0 Product: FreeBSD OS Product: Intelligent Management Center (IMC) < 7.3 E0504P04 Product: IOS XR Product: Junos Product: Linux Product: Linux Product: Network Analysis Module Product: NetWorker < 19.10 Product: OnCommand Unified Manager Product: Security Manager (CSM) Product: TelePresence Server Product: TelePresence SX20 Product: TelePresence System EX Series Product: Unified Communications Manager (CUCM) Product: Unified Contact Center Enterprise Product: Unified IP Phone +6 more

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um einen Denial of Service Angriff oder einen Angriff mit nicht spezifizierten Auswirkungen durchzuführen.

Product

OpenSSL ist eine im Quelltext frei verfügbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.

Vulnerabilities 3

  • Unscored —
    CVE-2016-7053 EPSS 22%

    CMS Null dereference

    In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference. This is caused by a bug in the handling of the ASN.1 CHOICE type in OpenSSL 1.1.0 which can result in a NULL value being passed to the struc…

    OpenSSL OpenSSL openssl Debian
  • Unscored —
    CVE-2016-7054 Public exploit EPSS 32%

    ChaCha20/Poly1305 heap-buffer-overflow

    In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.

    OpenSSL OpenSSL openssl Debian
  • Unscored —
    CVE-2016-7055 EPSS 14%

    There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1…

    openssl openssl openssl Debian Ubuntu Alpine

Revision history

  1. #30

    Schreibfehler korrigiert

  2. #29

    Neue Updates von Dell aufgenommen

  3. #26

    Neue Updates von Juniper aufgenommen

  4. #27

    Version nicht vorhanden

  5. #28

    Added references

  6. #24

    New remediations available

  7. #25

    Version nicht vorhanden

  8. #23

    New remediations available

  9. #21

    New remediations available

  10. #22

    Version nicht vorhanden

  11. #19

    New remediations available

  12. #20

    Version nicht vorhanden

  13. #18

    New remediations available

  14. #17

    New remediations available

  15. #16

    New remediations available

  16. #14

    New remediations available

  17. #15

    Version nicht vorhanden

  18. #13

    New remediations available

  19. #12

    New remediations available

  20. #11

    New remediations available

  21. #10

    New remediations available

  22. #9

    New remediations available

  23. #8

    New remediations available

  24. #1

    Initial Release

  25. #2

    Version nicht vorhanden

References