Multiple vulnerabilities in Stunnel

Description

An obsolete version of OpenSSL was found in Stunnel. By exploiting this vulnerability malicious users can cause denial of service, obtain sensitive information and bypass security. This vulnerability can be exploited remotely.

Original advisories

• Stunnel changelog

Exploitation

Public exploits exist for this vulnerability.

Related products

• Stunnel

CVE list

• CVE-2014-3508
  warning
• CVE-2014-3509
  high
• CVE-2014-3511
  warning
• CVE-2014-5139
  warning
• CVE-2014-3505
  warning
• CVE-2014-3506
  warning
• CVE-2014-3507
  warning
• CVE-2014-3510
  warning
• CVE-2014-3512
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com