OpenSSL Multiple Vulnerabilities

Last Update Date: 27 Jan 2017 11:04 Release Date: 27 Jan 2017 4164 Views

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities were identified in OpenSSL. A remote user can cause the target service to crash and obtain potentially sensitive information on the target system.

Impact

Denial of Service
Information Disclosure

System / Technologies affected

Versions prior to 1.0.2k, 1.1.0d

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix (1.0.2k, 1.1.0d)

Vulnerability Identifier

CVE-2017-3730
CVE-2017-3731
CVE-2017-3732

Source

SecurityTracker