openssl: denial of service [LWN.net]

Package(s):

openssl

CVE #(s):

CVE-2012-2333

Created:

May 11, 2012

Updated:

July 25, 2012

Description:

From the Mandriva advisory:

A flaw in the OpenSSL handling of CBC mode ciphersuites in DTLS can be exploited in a denial of service attack on both clients and servers (CVE-2012-2333).

Alerts:

Mandriva	MDVSA-2012:073	2012-05-11
Debian	DSA-2475-1	2012-05-17
Ubuntu	USN-1451-1	2012-05-24
Fedora	FEDORA-2012-7939	2012-05-29
Red Hat	RHSA-2012:0699-01	2012-05-29
CentOS	CESA-2012:0699	2012-05-29
CentOS	CESA-2012:0699	2012-05-29
Oracle	ELSA-2012-0699	2012-05-30
Oracle	ELSA-2012-0699	2012-05-30
Scientific Linux	SL-open-20120530	2012-05-30
SUSE	SUSE-SU-2012:0674-1	2012-05-30
SUSE	SUSE-SU-2012:0679-1	2012-05-31
SUSE	SUSE-SU-2012:0678-1	2012-05-31
Fedora	FEDORA-2012-8014	2012-06-03
Fedora	FEDORA-2012-8024	2012-06-03
Ubuntu	USN-1516-1	2012-07-25
Oracle	ELSA-2013-0587	2013-03-05

(Log in to post comments)