Description
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | apache2 | 2.2.14-2 | — |
| Debian 14 | lighttpd | 1.4.30-1 | — |
| Debian 14 | nginx | 0.7.64-1 | — |
| Debian 14 | nss | 3.12.6-1 | — |
| Debian 14 | openssl | 0.9.8k-6 | — |
| Debian 14 | pound | 2.6-6.1 | — |
| Debian 14 | tomcat-native | 1.1.18-1 | — |
| Debian 13 | apache2 | 2.2.14-2 | — |
| Debian 13 | lighttpd | 1.4.30-1 | — |
| Debian 13 | nginx | 0.7.64-1 | — |
| Debian 13 | nss | 3.12.6-1 | — |
| Debian 13 | openssl | 0.9.8k-6 | — |
| Debian 13 | pound | 2.6-6.1 | — |
| Debian 13 | tomcat-native | 1.1.18-1 | — |
| Debian 12 | apache2 | 2.2.14-2 | — |
| Debian 12 | lighttpd | 1.4.30-1 | — |
| Debian 12 | nginx | 0.7.64-1 | — |
| Debian 12 | nss | 3.12.6-1 | — |
| Debian 12 | openssl | 0.9.8k-6 | — |
| Debian 12 | tomcat-native | 1.1.18-1 | — |
| Debian 8 | pound | 2.6-6+deb8u1 | DSA-3253-1 |
| Debian 7 | pound | 2.6-2+deb7u1 | DSA-3253-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | lighttpd | 1.4.28-2+squeeze1.2 | DSA-2626-1 |
| Debian 6.0 | pound | 2.6-1+deb6u1 | DLA-400-1 |
| Debian 5.0 | apache2 | 2.2.9-10+lenny6 | DSA-1934-1 |
| Debian 5.0 | nss | 3.12.3.1-0lenny3 | DSA-2141-2 |
| Debian 5.0 | openssl | 0.9.8g-15+lenny11 | DSA-2141-1 |
| Debian 4.0 | apache2 | 2.2.3-4+etch11 | DSA-1934-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | java-1.6.0-ibm +6 | 1:1.6.0.9.0-1jpp.4.el6 | RHSA-2010:0987 |
| RHEL 6 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.31.b17.el6_0 | RHSA-2010:0865 |
| RHEL 5 | gnutls +2 | 1.4.1-3.el5_4.8 | RHSA-2010:0166 |
| RHEL 5 | httpd +2 | 2.2.3-31.el5_4.2 | RHSA-2009:1579 |
| RHEL 5 | java-1.4.2-ibm +6 | 1.4.2.13.4-1jpp.1.el5 | RHSA-2010:0786, RHSA-2010:0408, RHSA-2010:0155 |
| RHEL 5 | java-1.4.2-ibm-sap +4 | 1.4.2.13.6.sap-1jpp.1.el5 | RHSA-2010:0986 |
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.11.1-1jpp.3.el5 | RHSA-2010:0807, RHSA-2010:0130 |
| RHEL 5 | java-1.5.0-sun-uninstall | 1.5.0.22-1jpp.3.el5 | RHSA-2010:0338 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.7-1jpp.2.el5 | RHSA-2010:0987, RHSA-2009:1694 |
| RHEL 5 | java-1.6.0-openjdk +4 | 1:1.6.0.0-1.11.b16.el5 | RHSA-2010:0768, RHSA-2010:0339 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.19-1jpp.1.el5 | RHSA-2010:0770, RHSA-2010:0337 |
| RHEL 5 | mod_ssl | 1:2.2.3-31.el5_4.2 | RHSA-2009:1579 |
| RHEL 5 | nspr +1 | 4.8.4-1.el5_4 | RHSA-2010:0165 |
| RHEL 5 | nss +3 | 3.12.6-1.el5_4 | RHSA-2010:0165 |
| RHEL 5 | openssl +2 | 0.9.8e-12.el5_4.6 | RHSA-2010:0162 |
| RHEL 5 | openssl097a | 0.9.7a-9.el5_4.2 | RHSA-2010:0164 |
| RHEL 5 | rhev-hypervisor +1 | 5.4-2.1.12.1.el5_4rhev2_1 | RHSA-2010:0440 |
| RHEL 4 | gnutls +1 | 1.0.20-4.el4_8.7 | RHSA-2010:0167 |
| RHEL 4 | httpd +3 | 2.0.52-41.ent.6 | RHSA-2009:1580 |
| RHEL 4 | java-1.4.2-ibm +6 | 1.4.2.13.4-1jpp.1.el4 | RHSA-2010:0786, RHSA-2010:0408, RHSA-2010:0155 |
| RHEL 4 | java-1.4.2-ibm-sap +4 | 1.4.2.13.6.sap-1jpp.1.el4_8 | RHSA-2010:0986 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.11.1-1jpp.3.el4 | RHSA-2010:0807, RHSA-2010:0130 |
| RHEL 4 | java-1.5.0-sun-uninstall | 1.5.0.22-1jpp.3.el4 | RHSA-2010:0338 |
| RHEL 4 | java-1.6.0-ibm +6 | 1:1.6.0.7-1jpp.3.el4 | RHSA-2010:0987, RHSA-2009:1694 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.19-1jpp.1.el4 | RHSA-2010:0770, RHSA-2010:0337 |
| RHEL 4 | mod_ssl | 1:2.0.52-41.ent.6 | RHSA-2009:1580 |
| RHEL 4 | nspr +1 | 4.8.4-1.1.el4_8 | RHSA-2010:0165 |
| RHEL 4 | nss +2 | 3.12.6-1.el4_8 | RHSA-2010:0165 |
| RHEL 4 | openssl +2 | 0.9.7a-43.17.el4_8.5 | RHSA-2010:0163 |
| RHEL 3 | httpd +1 | 2.0.46-77.ent | RHSA-2009:1579 |
| RHEL 3 | java-1.4.2-ibm +5 | 1.4.2.13.4-1jpp.1.el3 | RHSA-2010:0786, RHSA-2010:0155 |
| RHEL 3 | mod_ssl | 1:2.0.46-77.ent | RHSA-2009:1579 |
| RHEL 3 | openssl +2 | 0.9.7a-33.26 | RHSA-2010:0163 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Capsule 6 | capsule-installer +1 | 2.3.17-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | createrepo_c +1 | 0.7.4-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | facter | 1:1.7.6-2.1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | foreman +1 | 1.7.2.33-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | foreman-discovery-image | 1:2.1.0-36.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | foreman-proxy | 1.7.2.5-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | foreman-selinux | 1.7.2.13-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | gofer +3 | 2.6.2-2.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | gperftools +1 | 2.0-3.el7sat.2 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | hfsplus-tools | 332.14-12.el7 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | hiera | 1.3.1-2.el7 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | katello +2 | 2.2.0.14-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | katello-agent | 2.2.5-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | katello-certs-tools | 2.2.1-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | libdb-cxx | 5.3.21-17.el7_0.1 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | livecd-tools +1 | 1:20.4-1.5.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | mod_passenger +3 | 4.0.18-19.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | mongodb +1 | 2.4.9-3.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | pulp +19 | 2.6.0.15-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | pulp-docker +2 | 0.2.5-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | pulp-katello | 0.5-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | puppet +1 | 3.6.2-4.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | puppet-foreman_scap_client | 0.3.3-9.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | puppetlabs-stdlib | 4.2.1-1.20140510git08b00d9.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-BeautifulSoup | 1:3.0.8.1-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-amqp | 1.4.6-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-anyjson | 0.3.3-5.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-billiard | 1:3.3.0.17-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-blinker | 1.3-2.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-bson +2 | 2.5.2-3.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-celery | 3.1.11-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-cherrypy | 3.2.2-3.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-crane | 0.2.2-1.el7 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-flask | 1:0.10.1-4.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-httplib2 | 0.6.0-6.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-isodate | 0.5.0-4.pulp.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-itsdangerous | 0.23-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-jinja2 | 2.7.2-2.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-kombu | 1:3.0.24-10.pulp.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-mongoengine | 0.7.10-2.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-nectar | 1.3.1-2.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-oauth2 | 1.5.211-8.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-okaara | 1.0.32-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-qpid | 0.30-6.el7 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-requests | 2.4.3-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-semantic-version | 2.2.0-3.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-simplejson | 3.2.0-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-webpy | 0.37-3.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | python-werkzeug | 0.9.1-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | qpid-cpp +3 | 0.30-9.el7 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | qpid-dispatch +2 | 0.4-7.el7 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | qpid-proton +2 | 0.9-4.el7 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | qpid-qmf +1 | 0.30-5.el7 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | qpid-tools | 0.30-4.el7 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | ruby-augeas | 0.5.0-1.el7 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | ruby-rgen | 0.6.5-2.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | ruby-shadow | 1.4.1-21.el7 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-ansi | 1.4.3-3.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-apipie-bindings | 0.0.11-1.el7 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-awesome_print | 1.0.2-12.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-bundler_ext | 0.3.0-7.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-clamp | 0.6.2-2.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-ffi | 1.4.0-3.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-gssapi | 1.1.2-4.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-hammer_cli_foreman_docker +1 | 0.0.3.9-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-hashie | 2.0.5-2.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-highline | 1.6.21-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-kafo | 0.6.5.9-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-kafo_parsers | 0.0.4.4-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-little-plugger | 1.1.3-17.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-logging | 1.8.1-26.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-mime-types | 1.19-7.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-multi_json +1 | 1.8.2-4.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-oauth | 0.4.7-8.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-powerbar | 1.0.11-8.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-rack | 1:1.4.1-13.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-rack-protection | 1.5.0-7.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-rake | 0.9.2.2-41.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-rest-client | 1.6.7-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-rkerberos | 0.1.2-3.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-rubyipmi | 0.10.0-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-satyr | 0.2-1.el7 | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-sinatra | 1:1.3.6-27.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-smart_proxy_abrt | 0.0.6-5.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-smart_proxy_discovery | 1.0.2.1-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-smart_proxy_openscap | 0.3.0.9-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-smart_proxy_pulp | 1.0.1.2-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | rubygem-tilt | 1.3.3-18.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | saslwrapper +1 | 0.22-5.el7sat | RHSA-2015:1591 |
| Red Hat Satellite Capsule 6 | v8 | 1:3.14.5.10-11.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | aether +5 | 1.13.1-13.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | ant-junit | 1.9.2-9.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | aopalliance | 1.0-8.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | apache-commons-codec-eap6 | 1.4-16.redhat_3.1.ep6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | apache-commons-net | 3.2-8.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | apache-ivy | 2.3.0-4.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | apache-mime4j | 0.6-10.redhat_3.1.ep6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | apache-parent | 10-14.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | apache-resource-bundles | 2-11.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | atinject | 1-13.20100611svn86.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | bouncycastle | 1.46-7.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | bsf | 2.4.0-19.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | c3p0 | 0.9.1.2-3.ep6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | candlepin +2 | 0.9.49.3-1.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | candlepin-common | 1.0.22-1.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | candlepin-guice | 3.0-2_redhat_1.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | candlepin-scl +1 | 1-5.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | candlepin-scl-quartz | 2.1.5-6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | candlepin-scl-rhino | 1.7R3-3.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | cdi-api | 1.0-11.SP4.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | cglib | 2.2-18.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | createrepo_c +1 | 0.7.4-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | elasticsearch | 0.90.10-7.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | facter | 1:1.7.6-2.1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | fasterxml-oss-parent | 11-2.ep6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | felix-framework | 4.2.1-5.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | foreman +7 | 1.7.2.33-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | foreman-discovery-image | 1:2.1.0-36.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | foreman-proxy | 1.7.2.5-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | foreman-selinux | 1.7.2.13-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | gettext-commons | 0.9.6-7.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | gofer +3 | 2.6.2-2.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | google-guice | 3.1.3-9.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | gperftools +1 | 2.0-3.el7sat.2 | RHSA-2015:1591 |
| Red Hat Satellite 6 | groovy | 1.8.9-7.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | guava | 13.0-6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | gutterball | 1.0.15.0-1.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | hawtjni | 1.6-9.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | hfsplus-tools | 332.14-12.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | hibernate-beanvalidation-api | 1.0.0-4.7.GA_redhat_2.ep6.el7.3 | RHSA-2015:1591 |
| Red Hat Satellite 6 | hibernate-jpa-2.0-api | 1.0.1-5.Final_redhat_2.1.ep6.el7.4 | RHSA-2015:1591 |
| Red Hat Satellite 6 | hibernate3-commons-annotations | 4.0.1-5.Final_redhat_2.1.ep6.el7.3 | RHSA-2015:1591 |
| Red Hat Satellite 6 | hibernate4 +3 | 4.2.7-6.SP2_redhat_1.1.ep6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | hibernate4-validator | 4.3.1-1.Final_redhat_1.1.ep6.el7.4 | RHSA-2015:1591 |
| Red Hat Satellite 6 | hiera | 1.3.1-2.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | hornetq | 2.3.14-1.Final_redhat_1.1.ep6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | ipxe-bootimgs | 20130517-7.1fm.gitc4bce43.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | jackson-annotations | 2.3.0-3.ep6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jackson-core +3 | 2.3.0-1.ep6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jackson-databind +1 | 2.3.0-2.ep6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jackson-jaxrs-base +2 | 2.3.0-5.ep6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | janino | 2.6.1-2.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jansi | 1.9-7.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jansi-native | 1.4-10.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jboss-ejb-3.1-api | 1.0.2-10.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jboss-el-2.2-api | 1.0.1-0.7.20120212git2fabd8.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jboss-interceptors-1.1-api | 1.0.2-0.9.20120319git49a904.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jboss-jaxb-api_2.2_spec | 1.0.4-3.Final_redhat_2.1.ep6.el7.1 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jboss-jaxrpc-1.1-api | 1.0.1-7.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jboss-logging | 3.1.4-1.GA_redhat_1.1.ep6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jboss-parent | 14-2.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jboss-servlet-3.0-api | 1.0.1-9.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jboss-specs-parent | 1.0.0-0.7.Beta2.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jboss-transaction-1.1-api | 1.0.1-8.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jboss-transaction-api_1.1_spec | 1.0.1-9.Final_redhat_2.2.ep6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jsch | 0.1.50-5.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jsoup | 1.6.1-10.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jsr-305 | 0-0.18.20090319svn.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | jzlib +1 | 1.1.1-6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | katello +3 | 2.2.0.14-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | katello-agent +1 | 2.2.5-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | katello-certs-tools | 2.2.1-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | katello-installer +1 | 2.3.17-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | libdb-cxx | 5.3.21-17.el7_0.1 | RHSA-2015:1591 |
| Red Hat Satellite 6 | libqpid-dispatch | 0.4-7.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | liquibase | 3.1.0-1.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | livecd-tools +1 | 1:20.4-1.5.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | logback | 1.0.13-6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | lucene4 +1 | 4.6.1-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven | 3.0.5-16.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven-artifact-resolver | 1:1.0-10.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven-common-artifact-filters | 1.4-11.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven-compiler-plugin | 3.1-4.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven-file-management | 1:1.2.1-8.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven-filtering | 1.1-3.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven-invoker | 2.1.1-9.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven-parent | 20-5.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven-release +2 | 2.2.1-12.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven-remote-resources-plugin | 1.4-7.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven-scm | 1.8.1-2.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven-shared-incremental | 1.1-6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven-shared-io | 1:1.1-7.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven-shared-utils | 0.4-3.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven-wagon | 2.4-3.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | maven2 +9 | 2.2.1-47.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | mod_passenger | 4.0.18-19.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | modello | 1.7-4.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | mongodb +1 | 2.4.9-3.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | nekohtml | 1.9.14-13.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | netty | 3.6.7-1.Final_redhat_1.1.ep6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | oauth | 20100601-5.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | objectweb-asm | 3.3.1-9.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | openscap +3 | 1.2.4-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | plexus-build-api | 0.0.7-11.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | plexus-cipher | 1.7-5.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | plexus-classworlds | 2.4.2-8.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | plexus-compiler | 2.2-7.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | plexus-component-api | 1.0-0.16.alpha15.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | plexus-containers +2 | 1.5.5-14.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | plexus-interactivity | 1.0-0.14.alpha6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | plexus-interpolation | 1.15-8.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | plexus-resources | 1.0-0.15.a7.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | plexus-sec-dispatcher | 1.4-13.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | plexus-utils | 3.0.9-9.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | plexus-velocity | 1.1.8-16.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | pulp +20 | 2.6.0.15-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | pulp-docker +2 | 0.2.5-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | pulp-katello | 0.5-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | puppet +1 | 3.6.2-4.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | puppet-foreman_scap_client | 0.3.3-9.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | puppetlabs-stdlib | 4.2.1-1.20140510git08b00d9.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-BeautifulSoup | 1:3.0.8.1-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-amqp | 1.4.6-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-anyjson | 0.3.3-5.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-billiard | 1:3.3.0.17-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-blinker | 1.3-2.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-bson +2 | 2.5.2-3.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-celery | 3.1.11-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-cherrypy | 3.2.2-3.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-crane | 0.2.2-1.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-flask | 1:0.10.1-4.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-httplib2 | 0.6.0-6.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-isodate | 0.5.0-4.pulp.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-itsdangerous | 0.23-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-jinja2 | 2.7.2-2.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-kombu | 1:3.0.24-10.pulp.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-mongoengine | 0.7.10-2.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-nectar | 1.3.1-2.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-oauth2 | 1.5.211-8.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-okaara | 1.0.32-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-qpid | 0.30-6.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-qpid-proton | 0.9-4.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-qpid-qmf | 0.30-5.el7 | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-requests | 2.4.3-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-saslwrapper | 0.22-5.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-semantic-version | 2.2.0-3.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-simplejson | 3.2.0-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-webpy | 0.37-3.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | python-werkzeug | 0.9.1-1.el7sat | RHSA-2015:1591 |
| Red Hat Satellite 6 | qpid-cpp +2 | 0.30-9.el7 | RHSA-2015:1591 |
| Red Hat Network Satellite 5 | java-1.6.0-ibm +1 | 1:1.6.0.9.1-1jpp.1.el5 | RHSA-2011:0880 |
| Red Hat JBoss Web Server 1 | glassfish-jsf | 1.2_13-2.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | httpd +2 | 2.2.10-11.ep5.el5 | RHSA-2010:0119, RHSA-2010:0011 |
| Red Hat JBoss Web Server 1 | httpd22 +5 | 2.2.10-25.1.ep5.el4 | RHSA-2010:0119, RHSA-2010:0011 |
| Red Hat JBoss Web Server 1 | httpd22-manual | 2.2.14-4.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | jakarta-commons-chain | 1.2-2.1.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | jakarta-commons-digester | 1.8.1-7.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | jakarta-commons-io | 1.4-1.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | jakarta-commons-modeler | 2.0-3.3.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | jakarta-commons-validator | 1.3.1-7.4.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | jakarta-oro | 2.0.8-3jpp.ep1.3.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | jboss-javaee +2 | 5.0.1-2.3.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | mod_jk +2 | 1.2.28-4.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | mod_ssl | 1:2.2.10-11.ep5.el5 | RHSA-2010:0119, RHSA-2010:0011 |
| Red Hat JBoss Web Server 1 | mod_ssl22 | 1:2.2.10-25.1.ep5.el4 | RHSA-2010:0119, RHSA-2010:0011 |
| Red Hat JBoss Web Server 1 | struts12 | 1.2.9-2.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | tomcat-native | 1.1.19-2.0.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | tomcat5 +12 | 5.5.28-7.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | tomcat6 +9 | 6.0.24-2.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | xerces-j2 | 2.9.1-2.2_patch_01.ep5.el4 | RHSA-2010:0119 |
| Red Hat JBoss Web Server 1 | xml-commons-resolver12 | 1:1.2-1.1.ep5.el4 | RHSA-2010:0119 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 | openSUSE-SU-2024:10071-1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 | openSUSE-SU-2024:10230-1 |
| openSUSE Tumbleweed | apache2 | 2.4.23-4.1 | openSUSE-SU-2024:10268-1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 | openSUSE-SU-2024:14572-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 2
- TLS - Renegotiation EDB-10579 · remote · Dec 21, 2009 · verified
- Mozilla NSS - NULL Character CA SSL Certificate Validation Security Bypass EDB-10071 · remote · Nov 10, 2009 · verified
GitHub 1 repository
-
johnwchadwick/cve-2009-3555-test-server ★ 3 · Mar 30, 2022
A TLS server using a vendored fork of the Go TLS stack that has renegotation indication extension forcibly disabled.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.tomcat:tomcat | >= 7.0.0, < 7.0.10 | 7.0.10 | GHSA-f7w7-6pjc-wwm6 |
| Maven | org.apache.tomcat:tomcat | >= 6.0.0, < 6.0.32 | 6.0.32 | GHSA-f7w7-6pjc-wwm6 |
| Maven | org.apache.tomcat:tomcat | >= 5.0.0, < 5.5.33 | 5.5.33 | GHSA-f7w7-6pjc-wwm6 |
Advisories 38
- RHSA-2015:1591 Red Hat Security Advisory: Red Hat Satellite 6.1.1 on RHEL 7 Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2011:0880 Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0987 Red Hat Security Advisory: java-1.6.0-ibm security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0986 Red Hat Security Advisory: java-1.4.2-ibm-sap security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0865 Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0807 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0770 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0786 Red Hat Security Advisory: java-1.4.2-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0768 Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0440 Red Hat Security Advisory: rhev-hypervisor security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0408 Red Hat Security Advisory: java-1.4.2-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0339 Red Hat Security Advisory: java-1.6.0-openjdk security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0337 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0338 Red Hat Security Advisory: java-1.5.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0167 Red Hat Security Advisory: gnutls security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0165 Red Hat Security Advisory: nss security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0166 Red Hat Security Advisory: gnutls security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0164 Red Hat Security Advisory: openssl097a security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0163 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0162 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0155 Red Hat Security Advisory: java-1.4.2-ibm security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0130 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0119 Red Hat Security Advisory: JBoss Enterprise Web Server 1.0.1 update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0011 Red Hat Security Advisory: httpd and httpd22 security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:1694 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:1580 Red Hat Security Advisory: httpd security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:1579 Red Hat Security Advisory: httpd security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- DSA-2626-1 lighttpd - several issues Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3253-1 pound - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-400-1 pound - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2141-2 nss - protocol design flaw Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1934-1 apache2 - several issues Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2141-1 openssl - protocol design flaw Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10230-1 MozillaThunderbird-45.5.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10268-1 apache2-2.4.23-4.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14572-1 firefox-esr-128.5.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10071-1 MozillaFirefox-50.1.0-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- ICSA-22-160-01 Mitsubishi Electric Air Conditioning Systems CISA ICS & IT advisories · Jun 9, 2022
References
- APPLE-SA-2010-05-18-1 vendor-advisory
- 1023427 vdb-entry
- http://support.avaya.com/css/P8/documents/100081611
- 62210 vdb-entry
- 37640 third-party-advisory
- http://www.arubanetworks.com/support/alerts/aid-020810.txt
- ADV-2010-0916 vdb-entry
- http://support.avaya.com/css/P8/documents/100114327
- RHSA-2010:0167 vendor-advisory
- ADV-2010-2010 vdb-entry
- FEDORA-2009-12750 vendor-advisory
- ADV-2010-0086 vdb-entry
- ADV-2010-1673 vdb-entry
- [tls] 20091104 TLS renegotiation issue mailing-list
- 37656 third-party-advisory
- RHSA-2010:0865 vendor-advisory
- 39628 third-party-advisory
- http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
- 42724 third-party-advisory
- ADV-2009-3310 vdb-entry
- ADV-2009-3205 vdb-entry
- http://blogs.sun.com/security/entry/vulnerability_in_tls_protocol_during
- 39461 third-party-advisory
- http://support.avaya.com/css/P8/documents/100114315
- http://www.proftpd.org/docs/RELEASE_NOTES-1.3.2c
- GLSA-201406-32 vendor-advisory
- http://www.ingate.com/Relnote.php?ver=481
- 1023204 vdb-entry
- 40866 third-party-advisory
- HPSBMU02799 vendor-advisory
- TA10-222A third-party-advisory
- 1023211 vdb-entry
- SSRT090249 vendor-advisory
- 39317 third-party-advisory
- 1023212 vdb-entry
- SUSE-SA:2010:061 vendor-advisory
- 39127 third-party-advisory
- 40545 third-party-advisory
- ADV-2010-3069 vdb-entry
- [4.5] 010: SECURITY FIX: November 26, 2009 vendor-advisory
- 1023210 vdb-entry
- 1023270 vdb-entry
- 40070 third-party-advisory
- 1023273 vdb-entry
- http://kbase.redhat.com/faq/docs/DOC-20491
- USN-927-5 vendor-advisory
- PM12247 vendor-advisory
- SUSE-SU-2011:0847 vendor-advisory
- MDVSA-2010:089 vendor-advisory
- RHSA-2010:0770 vendor-advisory
- http://www.openssl.org/news/secadv_20091111.txt
- 1023275 vdb-entry
- DSA-3253 vendor-advisory
- ADV-2009-3484 vdb-entry
- 1023207 vdb-entry
- 37859 third-party-advisory
- SSRT101846 vendor-advisory
- 1021752 vendor-advisory
- FEDORA-2010-6131 vendor-advisory
- ADV-2010-0848 vdb-entry