FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

openssl -- multiple vulnerabilities

Affected packages
		openssl	<	1.0.2_2
1.0.1	<=	mingw32-openssl	<	1.0.2b
		linux-c6-openssl	<	1.0.1e_6
		libressl	<	2.1.7
10.1	<=	FreeBSD	<	10.1_12
9.3	<=	FreeBSD	<	9.3_16
8.4	<=	FreeBSD	<	8.4_30

Details

VuXML ID	8305e215-1080-11e5-8ba2-000c2980a9f3
Discovery	2015-06-11
Entry	2015-06-11
Modified	2016-08-09

The OpenSSL team reports:

Missing DHE man-in-the-middle protection (Logjam) (CVE-2015-4000)

Malformed ECParameters causes infinite loop (CVE-2015-1788)

Exploitable out-of-bounds read in X509_cmp_time (CVE-2015-1789)

PKCS#7 crash with missing EnvelopedContent (CVE-2015-1790)

CMS verify infinite loop with unknown hash function (CVE-2015-1792)

Race condition handling NewSessionTicket (CVE-2015-1791)

Invalid free in DTLS (CVE-2014-8176)

[source]

References

CVE Name	CVE-2014-8176
CVE Name	CVE-2015-1788
CVE Name	CVE-2015-1789
CVE Name	CVE-2015-1790
CVE Name	CVE-2015-1791
CVE Name	CVE-2015-1792
CVE Name	CVE-2015-4000
FreeBSD Advisory	SA-15:10.openssl
URL	https://www.openssl.org/news/secadv_20150611.txt