A New Round Of OpenSSL Vulnerabilities Discovered
Written by Michael Larabel in Free Software on 5 June 2014 at 10:46 AM EDT. 18 Comments
Further fallout from the Heartbleed bug has occurred with another set of security vulnerabilities now being disclosed for OpenSSL.

Six new CVEs were made public today for OpenSSL. These potential exploits could allow for man-in-the-middle attacks, code execution, and denial of service attack. The new reports are:
- SSL/TLS MITM vulnerability (CVE-2014-0224)
- DTLS recursion flaw (CVE-2014-0221)
- DTLS invalid fragment vulnerability (CVE-2014-0195)
- SSL_MODE_RELEASE_BUFFERS NULL pointer dereference (CVE-2014-0198)
- SSL_MODE_RELEASE_BUFFERS session injection or denial of service (CVE-2010-5298)
- Anonymous ECDH denial of service (CVE-2014-3470)
More information on these latest OpenSSL security woes can be found via the posting at OpenSSL.org.

About The Author
Author picture

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 10,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter or contacted via MichaelLarabel.com.

Related Free Software News
Popular News
Trending Reviews & Featured Articles