|
Lines 58-63
Link Here
|
| 58 |
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.) |
58 |
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.) |
| 59 |
--> |
59 |
--> |
| 60 |
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> |
60 |
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> |
|
|
61 |
<vuln vid="e53cb1e7-f891-11e6-b2c3-589cfc0654e1"> |
| 62 |
<topic>openssl -- multiple DoS vulnerabilities</topic> |
| 63 |
<affects> |
| 64 |
<package> |
| 65 |
<name>linux-c6-openssl</name> |
| 66 |
<range><lt>1.0.1e_13</lt></range> |
| 67 |
</package> |
| 68 |
<package> |
| 69 |
<name>linux-c7-openssl</name> |
| 70 |
<range><lt>1.0.1e_3</lt></range> |
| 71 |
</package> |
| 72 |
</affects> |
| 73 |
<description> |
| 74 |
<body xmlns="http://www.w3.org/1999/xhtml"> |
| 75 |
<p>Red Hat reports:</p> |
| 76 |
<blockquote cite="https://rhn.redhat.com/errata/RHSA-2017-0286.html"> |
| 77 |
<p>An integer underflow leading to an out of bounds read flaw was found in |
| 78 |
OpenSSL. A remote attacker could possibly use this flaw to crash a 32-bit |
| 79 |
TLS/SSL server or client using OpenSSL if it used the RC4-MD5 cipher suite.</p> |
| 80 |
<p>A denial of service flaw was found in the way the TLS/SSL protocol defined |
| 81 |
processing of ALERT packets during a connection handshake. A remote attacker |
| 82 |
could use this flaw to make a TLS/SSL server consume an excessive amount of CPU |
| 83 |
and fail to accept connections form other clients.</p> |
| 84 |
</blockquote> |
| 85 |
</body> |
| 86 |
</description> |
| 87 |
<references> |
| 88 |
<url>https://rhn.redhat.com/errata/RHSA-2017-0286.html</url> |
| 89 |
<cvename>2017-3731</cvename> |
| 90 |
<cvename>2016-8610</cvename> |
| 91 |
</references> |
| 92 |
<dates> |
| 93 |
<discovery>2017-02-20</discovery> |
| 94 |
<entry>2017-02-22</entry> |
| 95 |
</dates> |
| 96 |
</vuln> |
| 97 |
|
| 61 |
<vuln vid="786a7d87-f826-11e6-9436-14dae9d5a9d2"> |
98 |
<vuln vid="786a7d87-f826-11e6-9436-14dae9d5a9d2"> |
| 62 |
<topic>fbsdmon -- information disclosure vulnerability</topic> |
99 |
<topic>fbsdmon -- information disclosure vulnerability</topic> |
| 63 |
<affects> |
100 |
<affects> |