FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

OpenSSL -- multiple vulnerabilities

Affected packages
		openssl	<	1.0.2k,1
		openssl-devel	<	1.1.0d
		linux-c6-openssl	<	1.0.1e_13
		linux-c7-openssl-libs	<	1.0.1e_3
11.0	<=	FreeBSD	<	11.0_8
10.3	<=	FreeBSD	<	10.3_17

Details

VuXML ID	d455708a-e3d3-11e6-9940-b499baebfeaf
Discovery	2017-01-26
Entry	2017-01-26
Modified	2017-05-26

The OpenSSL project reports:

Truncated packet could crash via OOB read (CVE-2017-3731)

Bad (EC)DHE parameters cause a client crash (CVE-2017-3730)

BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)

Montgomery multiplication may produce incorrect results (CVE-2016-7055)

[source]

References

CVE Name	CVE-2016-7055
CVE Name	CVE-2017-3730
CVE Name	CVE-2017-3731
CVE Name	CVE-2017-3732
FreeBSD Advisory	SA-17:02.openssl
URL	https://www.openssl.org/news/secadv/20170126.txt