Blog | G5 Cyber Security

Latest OpenSSL flaws can lead to information leakage, code execution and DoS

The OpenSSL Project announced today 6 more vulnerabilities in the widely deployed cryptographic library. The vulnerabilities include denial of service, information disclosure and potential remote code execution. The most common use of SSL/TLS on the web is the web browser. None of the most popular browsers (Firefox, Chrome and Internet Explorer) use OpenSSL for their cryptographic functions leaving them unscathed. The flaw relies on both the client and the server running vulnerable versions of OpenSSL. Only versions 1.0.1 and higher of the server are vulnerable.”]

Source: https://nakedsecurity.sophos.com/2014/06/06/latest-openssl-flaws-can-lead-to-information-leakage-code-execution-and-dos/

Exit mobile version