OpenSSL: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• Unscored —
  CVE-2016-6302 EPSS 28%

  The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validati…

  openssl openssl openssl Debian Ubuntu Alpine
  Sep 16, 2016
• Unscored —
  CVE-2016-6303 EPSS 32%

  Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers …

  openssl openssl openssl Debian Ubuntu Alpine
  Sep 16, 2016

Revision history

1. 2024-01-25 #36

   Neue Updates von Dell aufgenommen

2. 2022-04-10 #35

   Neue Updates von Oracle Linux aufgenommen

3. 2021-03-31 #34

   Neue Updates von Oracle Linux aufgenommen

4. 2019-08-18 #33

   Neue Updates von Oracle Linux aufgenommen

5. 2018-07-12 #32

   New remediations available

6. 2017-12-07 #31

   New remediations available

7. 2017-03-08 #27

   New remediations available

8. 2017-03-08 #28

   Version nicht vorhanden

9. 2017-03-08 #29

   New remediations available

10. 2017-03-08 #30

    Version nicht vorhanden

11. 2017-01-11 #26

    New remediations available

12. 2016-12-20 #25

    New remediations available

13. 2016-11-30 #23

    New remediations available

14. 2016-11-30 #24

    Version nicht vorhanden

15. 2016-10-16 #16

    New remediations available

16. 2016-10-16 #17

    Version nicht vorhanden

17. 2016-10-16 #18

    Version nicht vorhanden

18. 2016-10-16 #19

    Version nicht vorhanden

19. 2016-10-16 #20

    Version nicht vorhanden

20. 2016-10-16 #21

    Version nicht vorhanden

21. 2016-10-16 #22

    Version nicht vorhanden

22. 2016-10-06 #13

    New remediations available

23. 2016-10-06 #14

    New remediations available

24. 2016-10-06 #15

    Version nicht vorhanden

25. 2016-10-05 #10

    New remediations available

References

• Red Hat Bugzilla Bug ID 1370146 vom 2016-09-18
  https://bugzilla.redhat.com/show_bug.cgi?id=1370146
• National Vulnerability Database CVE-2016-6303
  https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6303
• National Vulnerability Database CVE-2016-6302
  https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6302
• Debian Security Advisory DSA-3673 vom 2016-09-22
  https://www.debian.org/security/2016/dsa-3673
• FreeBSD Security Advisory FREEBSD-SA-16:26.OPENSSL vom 2016-09-23
  https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc
• Ubuntu Security Notice USN-3087-2 vom 2016-09-23
  http://www.ubuntu.com/usn/usn-3087-2/
• SUSE Security Update Announcement ID SUSE-SU-2016:2387-1
  https://www.suse.com/de-de/support/update/announcement/2016/suse-su-20162387-1.html
• Red Hat Security Advisory RHSA-2016:1940 vom 2016-09-27
  https://access.redhat.com/errata/RHSA-2016:1940
• SUSE Security Update SUSE-SU-2016:2394-1 vom 2016-09-27
  https://www.suse.com/support/update/announcement/2016/suse-su-20162394-1.html
• CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-09-27
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20Affecting%20Cisco%20Products:%20September%202016&vs_k=1
• SUSE Security Update SUSE-SU-2016:2458-1 vom 2016-10-05
  https://www.suse.com/support/update/announcement/2016/suse-su-20162458-1.html
• F5 Security Advisory sol35543324 vom 2016-10-05
  https://support.f5.com/kb/en-us/solutions/public/k/35/sol35543324.html?ref=rss
• Blue Coat Security Advisory sa13 vom 2016-10-06
  https://kb.bluecoat.com/security-advisory/sa132
• SUSE Security Update SUSE-SU-2016:2468-1 vom 2016-10-07
  https://www.suse.com/support/update/announcement/2016/suse-su-20162468-1.html
• SUSE Security Update SUSE-SU-2016:2469-1 vom 2016-10-07
  https://www.suse.com/support/update/announcement/2016/suse-su-20162469-1.html
• Juniper Security Bulletin JSA10759 vom 2016-10-14
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759&cat=SIRT_1&actp=LIST
• Update des CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-10-19
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20Affecting%20Cisco%20Products:%20September%202016&vs_k=1
• BLUECOAT Security Advisory SA135 vom 2016-12-01
  https://bto.bluecoat.com/security-advisory/sa135
• BLUECOAT Security Advisory SA137 vom 2016-12-20
  https://bto.bluecoat.com/security-advisory/sa137
• Juniper Security Advisory JSA10774 vom 2017-01-12
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774
• Juniper Security Advisory JSA10770 vom 2017-01-12
  http://www.auscert.org.au/render.html?it=42842
• Xerox Security Bulletin XRX17-006 vom 2017-03-08
  https://www.xerox.com/download/security/security-bulletin/2efe6-54a395387fa39/cert_XRX17-006_FFPSv8_UpdateManager_Mar2017.pdf
• Xerox Security Bulletin XRX17-005 vom 2017-03-08
  https://www.xerox.com/download/security/security-bulletin/312e6-54a3954424112/cert_XRX17-005_FFPSv7_v9_UpdateManager_Mar2017.pdf
• McAfee Security Bulletin:SB10215
  https://kc.mcafee.com/corporate/index?page=content&id=SB10215
• Red Hat Security Advisory RHSA-2018:2185 vom 2018-07-13
  https://access.redhat.com/errata/RHSA-2018:2185
• Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16
  http://linux.oracle.com/errata/ELSA-2019-4747.html
• Oracle Linux Security Advisory ELSA-2021-9150 vom 2021-04-01
  https://linux.oracle.com/errata/ELSA-2021-9150.html
• Oracle Linux Security Advisory ELSA-2022-9272 vom 2022-04-08
  https://linux.oracle.com/errata/ELSA-2022-9272.html
• Dell Knowledge Base Article
  https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities