Alert GCSA 17009 - Vulnerabilita' in OpenSSL
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ****************************************************************** Alert ID: GCSA-17009 Data: 27 Gennaio 2017 Titolo: Vulnerabilita' in OpenSSL ****************************************************************** :: Descrizione del problema Sono state riscontrate alcune vulnerabilita' in OpenSSL che se sfruttate possono consentire ad un attaccante remoto di causare un crash della macchina che ne e' affetta. :: Software interessato OpenSSL versioni precedenti alle 1.1.0d, 1.0.2k :: Impatto Denial of service :: Soluzioni Aggiornare il software alle versioni 1.1.0d, 1.0.2k :: Riferimenti OpenSSL.org - Vulnerabilities https://www.openssl.org/news/secadv/20170126.txt Security Tracker http://www.securitytracker.com/id/1037717 SecurityFocus http://www.securityfocus.com/bid/95814 http://www.securityfocus.com/bid/95812 http://www.securityfocus.com/bid/95813 Mitre CVE http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3730 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3731 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3732 GARR CERT Newsletter subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAliLN9AACgkQwZxMk2USYEJnNwCeMMaLpliv5bGkS1A0t9MtQHgA 0NsAnj9zD/Yc192MXbKiZhekFZEDThoR =WEeE -----END PGP SIGNATURE-----