openssl: denial of service [LWN.net]

Package(s):

openssl

CVE #(s):

CVE-2012-0050

Created:

January 23, 2012

Updated:

February 17, 2012

Description:

From the CVE entry:

OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service via unspecified vectors. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.

Alerts:

Fedora	FEDORA-2012-0708	2012-01-22
Debian	DSA-2392-1	2012-01-23
Fedora	FEDORA-2012-0702	2012-01-24
Oracle	ELSA-2012-0060	2012-01-25
Oracle	ELSA-2012-0059	2012-01-25
Mandriva	MDVSA-2012:011	2012-01-29
Ubuntu	USN-1357-1	2012-02-09
openSUSE	openSUSE-SU-2012:0266-1	2012-02-17
Gentoo	201203-12	2012-03-05
SUSE	SUSE-SU-2012:0674-1	2012-05-30
openSUSE	openSUSE-SU-2013:0336-1	2013-02-25

(Log in to post comments)