openssl openssl 1.1.0b vulnerabilities and exploits

(subscribe to this query)

In OpenSSL 1.1.0 prior to 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack.

Openssl Openssl 1.1.0c Openssl Openssl 1.1.0 Openssl Openssl 1.1.0b Openssl Openssl 1.1.0a Oracle Agile Engineering Data Management 6.2.0 Oracle Jd Edwards World Security A9.2 Oracle Communications Eagle Lnp Application Processor 10.1 Oracle Communications Application Session Controller 3.7.1 Oracle Jd Edwards World Security A9.4 Oracle Jd Edwards Enterpriseone Tools 9.2 Oracle Communications Operations Monitor 3.4 Oracle Communications Operations Monitor 4.0 Oracle Agile Engineering Data Management 6.1.3 Oracle Jd Edwards World Security A9.1 Oracle Jd Edwards World Security A9.3 Oracle Communications Eagle Lnp Application Processor 10.0 Oracle Communications Eagle Lnp Application Processor 10.2 Oracle Communications Application Session Controller 3.8.0

1 EDB exploit1 Github repository1 Article

During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 prior to 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected.

Openssl Openssl 1.1.0 Openssl Openssl 1.1.0c Openssl Openssl 1.1.0d Openssl Openssl 1.1.0a Openssl Openssl 1.1.0b Hp Operations Agent 11.15 Hp Operations Agent 11.14

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook