KLA10460
Multiple vulnerabilities in OpenSSL

Multiple serious vulnerabilities have been found in OpenSSL. Malicious users can exploit these vulnerabilities to cause denial of service or bypass security restrictions.

Below is a complete list of vulnerabilities pppeep

1. An unknown vulnerability can be exploited remotely via specially designed DTLS message;
2. Improper calculations can be exploited remotely via unspecified vectors;
3. An unknown vulnerability can be exploited remotely via unspecified vectors related to ServerKeyExchange, fingerprint-based certificate-blacklist, Diffie-Hellman certificate;
4. Lack of protocol checking can be exploited remotely via unexpected handshake;
5. An unknown vulnerability can be exploited remotely via RSA-to-EXPORT_RSA downgrade attacks;
6. Memory leak can be exploited remotely via specially designed records.

OpenSSL versions earlier than 0.9.8zd
OpenSSL 1.0.0 versions earlier than 1.0.0p
OpenSSL 1.0.1 versions earlier than 1.0.1k

Update to latest version!

OpenSSL bulletin