ALT Linux Team

Package openssl10 update in sisyphus on 2014-04-08

ALT-PU-2014-1451-1

Package openssl10 updated to version 1.0.1g-alt1 for branch sisyphus in task 117863.

Closed vulnerabilities

Published: 2014-03-25

BDU:2015-00130

Уязвимость программного обеспечения Cisco IPS, позволяющая злоумышленнику получить одноразовый код (nonce) ECDSA

Severity: LOW (1.9)
References:
Published: 2014-03-25

BDU:2015-00131

Уязвимость программного обеспечения Cisco Unified Communications Manager, позволяющая злоумышленнику получить одноразовый код (nonce) ECDSA

Severity: LOW (1.9)
References:
Published: 2014-04-08

BDU:2015-09760

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность защищаемой информации

Severity: MEDIUM (5.0)
References:
Published: 2014-03-25
Modified: 2024-11-21

CVE-2014-0076

The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.

Severity: LOW (1.9)
References:
Published: 2014-04-08
Modified: 2025-04-03

CVE-2014-0160

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top