Oval Definition:oval:org.mitre.oval:def:25983
Revision Date:2014-11-17Version:15
Title:AIX OpenSSL Denial of Service due to NULL pointer dereference
Description:The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service (NULL pointer dereference and client application crash) via a ServerHello message that includes an SRP ciphersuite without the required negotiation of that ciphersuite with the client.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-5139
Platform(s):IBM AIX 6.1
IBM AIX 7.1
Product(s):
Definition Synopsis
  • platforms
  • IBM AIX 6.1 is installed
  • OR IBM AIX 7.1 is installed
  • AND File Version Exists
  • openssl.base greater than or equal 1.0.1.500
  • AND openssl.base less than or equal 1.0.1.511
    • BACK