Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Gentoo: GLSA-200710-06 High Severity OpenSSL Information Disclosure

gentoo
Calendar Grey October 7, 2007
Scroller Gentoo
Gentoo users, a high severity advisory highlights serious vulnerabilities in OpenSSL. Take immediate action to mitigate potential buffer underflow risks and safeguard sensitive data
A buffer underflow vulnerability and an information disclosure vulnerability have been discovered in OpenSSL.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200710-06
                                            https://security.gentoo.org/

  Severity: High
     Title: OpenSSL: Multiple vulnerabilities
      Date: October 07, 2007
      Bugs: #188799, #194039
        ID: 200710-06


Synopsis
=======
A buffer underflow vulnerability and an information disclosure
vulnerability have been discovered in OpenSSL.

Background
=========
OpenSSL is an implementation of the Secure Socket Layer and Transport
Layer Security protocols.

Affected packages
================
    -------------------------------------------------------------------
     Package           /   Vulnerable   /                   Unaffected
    -------------------------------------------------------------------
  1  dev-libs/openssl      < 0.9.8e-r3                    >= 0.9.8e-r3

==========
Moritz Jodeit reported an off-by-one error in the
SSL_get_shared_ciphers() function, re...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory Gentoo high severity security issue OpenSSL information disclosure buffer underflow

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory Gentoo high severity security issue OpenSSL information disclosure buffer underflow

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround