OpenSSL vulnerability fixes
OpenSSL has addressed six vulnerabilities in OpenSSL 1.0.0f and 0.9.8s.
CVEs include:
DTLS Plaintext Recovery Attack (CVE-2011-4108)
Double-free in Policy Checks (CVE-2011-4109)
Uninitialized SSL 3.0 Padding (CVE-2011-4576)
Malformed RFC 3779 Data Can Cause Assertion Failures (CVE-2011-4577)
SGC Restart DoS Attack (CVE-2011-4619)
Invalid GOST parameters DoS Attack (CVE-2012-0027)
Details here: http://openssl.org/news/secadv_20120104.txt
Downloads here: http://openssl.org/source/
Note that the hyperlink for the Nadhem Alfardan and Kenny Paterson paper specific to the DTLS Plaintext Recovery Attack results in a 404 error.
Keywords: SSL vulnerabilities
2 comment(s)
×
Diary Archives
Comments
www.isg.rhul.ac.ul/~kp/dtls.pdf
Kenny Paterson
Jan 5th 2012
1 decade ago
Make that...
http://www.isg.rhul.ac.uk/~kp/dtls.pdf
---
Jan 5th 2012
1 decade ago