OpenSSL: Schwachstelle ermöglicht Offenlegung von Informationen

Summary

Product

Vulnerabilities 1

• Unscored —
  CVE-2016-2178

  The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of cons…

  openssl openssl openssl Debian Ubuntu Alpine
  Jun 20, 2016

Revision history

1. 2024-01-25 #43

   Neue Updates von Dell aufgenommen

2. 2022-04-10 #42

   Neue Updates von Oracle Linux aufgenommen

3. 2021-03-31 #41

   Neue Updates von Oracle Linux aufgenommen

4. 2019-08-18 #40

   Neue Updates von Oracle Linux aufgenommen

5. 2017-12-07 #39

   New remediations available

6. 2017-11-05 #38

   New remediations available

7. 2017-06-28 #36

   New remediations available

8. 2017-06-28 #37

   Version nicht vorhanden

9. 2017-03-08 #33

   New remediations available

10. 2017-03-08 #34

    Version nicht vorhanden

11. 2017-03-08 #35

    New remediations available

12. 2017-01-25 #32

    New remediations available

13. 2017-01-11 #31

    New remediations available

14. 2016-12-18 #30

    New remediations available

15. 2016-11-01 #28

    New remediations available

16. 2016-11-01 #29

    Version nicht vorhanden

17. 2016-10-16 #21

    New remediations available

18. 2016-10-16 #22

    Version nicht vorhanden

19. 2016-10-16 #23

    Version nicht vorhanden

20. 2016-10-16 #24

    Version nicht vorhanden

21. 2016-10-16 #25

    Version nicht vorhanden

22. 2016-10-16 #26

    Version nicht vorhanden

23. 2016-10-16 #27

    Version nicht vorhanden

24. 2016-10-06 #18

    New remediations available

25. 2016-10-06 #19

    Version nicht vorhanden

References

• Eintrag in der OSS Mailing Liste vom 2016-06-12
  http://www.openwall.com/lists/oss-security/2016/06/08/2
• Advisory auf eprint.iacr.org
  http://eprint.iacr.org/2016/594.pdf
• F5 Security Advisory sol53084033 vom 2016-07-14
  https://support.f5.com/kb/en-us/solutions/public/k/53/sol53084033.html
• Debian Security Advisory DSA-3673 vom 2016-09-22
  https://www.debian.org/security/2016/dsa-3673
• FreeBSD Security Advisory FREEBSD-SA-16:26.OPENSSL vom 2016-09-23
  https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc
• Ubuntu Security Notice USN-3087-2 vom 2016-09-23
  http://www.ubuntu.com/usn/usn-3087-2/
• SUSE Security Update Announcement ID SUSE-SU-2016:2387-1
  https://www.suse.com/de-de/support/update/announcement/2016/suse-su-20162387-1.html
• Red Hat Security Advisory RHSA-2016:1940 vom 2016-09-27
  https://access.redhat.com/errata/RHSA-2016:1940
• SUSE Security Update SUSE-SU-2016:2394-1 vom 2016-09-27
  https://www.suse.com/support/update/announcement/2016/suse-su-20162394-1.html
• CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-09-27
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20Affecting%20Cisco%20Products:%20September%202016&vs_k=1
• SUSE Security Update SUSE-SU-2016:2458-1 vom 2016-10-05
  https://www.suse.com/support/update/announcement/2016/suse-su-20162458-1.html
• Arista Security Advisory 0024 vom 2016-10-05
  http://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24
• SUSE Security Update SUSE-SU-2016:2468-1 vom 2016-10-07
  https://www.suse.com/support/update/announcement/2016/suse-su-20162468-1.html
• SUSE Security Update SUSE-SU-2016:2469-1 vom 2016-10-07
  https://www.suse.com/support/update/announcement/2016/suse-su-20162469-1.html
• Juniper Security Bulletin JSA10759 vom 2016-10-14
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759&cat=SIRT_1&actp=LIST
• Update des CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-10-19
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20Affecting%20Cisco%20Products:%20September%202016&vs_k=1
• SUSE Security Update SUSE-SU-2016:2470-2 vom 2016-11-01
  https://www.suse.com/support/update/announcement/2016/suse-su-20162470-2.html
• RedHat Security Advisory RHSA-2016-2957
  https://rhn.redhat.com/errata/RHSA-2016-2957.html
• Juniper Security Advisory JSA10774 vom 2017-01-12
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774
• Juniper Security Advisory JSA10770 vom 2017-01-12
  http://www.auscert.org.au/render.html?it=42842
• Red Hat Security Advisory RHSA-2017:0193 vom 2017-01-26
  https://access.redhat.com/errata/RHSA-2017:0193
• Red Hat Security Advisory RHSA-2017:0194 vom 2017-01-26
  https://access.redhat.com/errata/RHSA-2017:0194
• Xerox Security Bulletin XRX17-006 vom 2017-03-08
  https://www.xerox.com/download/security/security-bulletin/2efe6-54a395387fa39/cert_XRX17-006_FFPSv8_UpdateManager_Mar2017.pdf
• Xerox Security Bulletin XRX17-005 vom 2017-03-08
  https://www.xerox.com/download/security/security-bulletin/312e6-54a3954424112/cert_XRX17-005_FFPSv7_v9_UpdateManager_Mar2017.pdf
• Red Hat Security Advisory RHSA-2017:1658 vom 2017-06-29
  https://access.redhat.com/errata/RHSA-2017:1658
• F5 Security Advisory K53084033 vom 2017-11-06
  https://support.f5.com/csp/article/K53084033
• McAfee Security Bulletin:SB10215
  https://kc.mcafee.com/corporate/index?page=content&id=SB10215
• Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16
  http://linux.oracle.com/errata/ELSA-2019-4747.html
• Oracle Linux Security Advisory ELSA-2021-9150 vom 2021-04-01
  https://linux.oracle.com/errata/ELSA-2021-9150.html
• Oracle Linux Security Advisory ELSA-2022-9272 vom 2022-04-08
  https://linux.oracle.com/errata/ELSA-2022-9272.html
• Dell Knowledge Base Article
  https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities