Описание
OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | openssl097a | Will not fix | ||
| Red Hat Enterprise Linux 6 | openssl098e | Will not fix | ||
| Red Hat JBoss Enterprise Web Server 1 | eap-5 | Affected | ||
| Red Hat JBoss Enterprise Web Server 1 | openssl | Will not fix | ||
| Red Hat Enterprise Linux 5 | openssl | Fixed | RHSA-2013:0587 | 04.03.2013 |
| Red Hat Enterprise Linux 6 | openssl | Fixed | RHSA-2013:0587 | 04.03.2013 |
| Red Hat JBoss Enterprise Application Platform 5.2 | Fixed | RHSA-2013:0783 | 01.05.2013 | |
| Red Hat JBoss Enterprise Application Platform 6.1 | openssl | Fixed | RHSA-2013:0833 | 20.05.2013 |
| Red Hat JBoss Web Platform 5.2 | Fixed | RHSA-2013:0782 | 01.05.2013 | |
| Red Hat JBoss Web Server 2.0 | openssl | Fixed | RHSA-2013:1013 | 03.07.2013 |
Показывать по
Дополнительная информация
Статус:
5 Medium
CVSS2
Связанные уязвимости
OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d do ...
OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
5 Medium
CVSS2