Поиск уязвимостей

Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode ...

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.

Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.

Уязвимость функции EVP_EncodeUpdate (crypto/evp/encode.c) библиотеки OpenSSL, связанная с ошибкой при обработке числа, позволяющая нарушителю вызвать отказ в обслуживании

Уязвимость функции проверки заполнения реализации AES-NI библиотеки OpenSSL, позволяющая нарушителю получить несанкционированный доступ к конфиденциальным данным

Security update for compat-openssl097g

ELSA-2016-3576: openssl security update (IMPORTANT)

Security update for compat-openssl098

Security update for libopenssl0_9_8

Security update for openssl

Security update for compat-openssl098

Security update for SLES 12 Docker image

Security update for SLES 12-SP1 Docker image

Security update for mysql-community-server

Security update for mysql-community-server