openssl: multiple vulnerabilities [LWN.net]

Package(s):

openssl

CVE #(s):

CVE-2006-2937 CVE-2006-2940 CVE-2006-3780 CVE-2006-4343 CVE-2006-3738

Created:

September 28, 2006

Updated:

December 12, 2006

Description:

OpenSSL has a number of denial of service vulnerabilities including: two vulnerabilities involving invalid ASN.1 structures, a buffer overflow in the SSL_get_shared_ciphers() function and an SSLv2 client crash that can be caused by a malicious server.

Alerts:

Gentoo	200612-11	2006-12-11
Gentoo	200610-11	2006-10-24
Debian	DSA-1195-1	2006-10-10
SuSE	SUSE-SR:2006:024	2006-10-06
Ubuntu	USN-353-2	2006-10-04
Mandriva	MDKSA-2006:178	2006-10-02
Mandriva	MDKSA-2006:177	2006-10-02
Mandriva	MDKSA-2006:172-1	2006-10-02
Debian	DSA-1185-2	2006-10-02
rPath	rPSA-2006-0175-2	2006-09-28
Fedora	FEDORA-2006-1004	2006-09-28
Trustix	TSLSA-2006-0054	2006-09-29
Slackware	SSA:2006-272-01	2006-09-29
rPath	rPSA-2006-0175-1	2006-09-28
Red Hat	RHSA-2006:0695-01	2006-09-28
Mandriva	MDKSA-2006:172	2006-09-28
Debian	DSA-1185-1	2006-09-28
Ubuntu	USN-353-1	2006-09-28
SuSE	SUSE-SA:2006:058	2006-09-28
OpenPKG	OpenPKG-SA-2006.021	2006-09-28

(Log in to post comments)