Out-of-Bounds Affecting openssl package, versions >=1.0.0, <1.0.108

OpenSSL is a SSL/TLS and Crypto toolkit. Deprecated in Mac OS and gone in iOS, this spec gives your project non-deprecated OpenSSL support.

Affected versions of this package are vulnerable to Out-of-Bounds. OpenSSL is vulnerable to denial of service (DoS) attacks and possible other attacks. These attacks are possible because the asn1_d2i_read_bio function doesn't correctly interpret integer data which can be leveraged to do buffer overflow attacks or cause memory consumption.

• Apple Security Advisory
• Apple Security Announcement
• Debian Security Advisory
• Exploit DB
• Fedora Security Announcement
• Fedora Security Announcement
• Fedora Security Announcement
• Fedora Security Announcement
• HP Security Bulletin
• HP Security Bulletin
• HP Security Bulletin
• http://archives.neohapsis.com/archives/fulldisclosure/2012-04/0209.html
• http://cvs.openssl.org/chngview?cn=22431
• http://cvs.openssl.org/chngview?cn=22434
• http://cvs.openssl.org/chngview?cn=22439
• http://osvdb.org/81223
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862
• https://kb.juniper.net/KB27376
• http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578
• http://www.openssl.org/news/secadv_20120419.txt
• IBM Security Bulletin
• OpenSuse Security Announcement
• OpenSuse Security Announcement
• OpenSuse Security Announcement
• RedHat Security Advisory
• RedHat Security Advisory
• RedHat Security Advisory
• RedHat Security Advisory
• RedHat Security Advisory
• Secunia Advisory
• Secunia Advisory
• Secunia Advisory
• Secunia Advisory
• Secunia Advisory
• Secunia Advisory
• Security Focus
• Security Tracker
• Ubuntu Security Advisory
• Exploit DB