diff options
| author | Vsevolod Stakhov <vsevolod@FreeBSD.org> | 2015-01-22 17:02:40 +0000 |
|---|---|---|
| committer | Vsevolod Stakhov <vsevolod@FreeBSD.org> | 2015-01-22 17:02:40 +0000 |
| commit | a91fe34f1e8a9aa1e0c3470be3a30d8488620505 (patch) | |
| tree | 1361fd91e1495a8f251b1f7056aa2da0b2b49d45 /security | |
| parent | 469e0c88d847dbd358d37675689d04e26b36ee63 (diff) | |
| download | freebsd-ports-a91fe34f1e8a9aa1e0c3470be3a30d8488620505.zip | |
Add CVE-2015-0206 description for LibreSSL port.
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index f2208a624b63..11fa052d1342 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -57,6 +57,38 @@ Notes: --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="f9c388c5-a256-11e4-992a-7b2a515a1247"> + <topic>LibreSSL -- DTLS vulnerability</topic> + <affects> + <package> + <name>libressl</name> + <range><lt>2.1.3</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>OpenSSL Security Advisory:</p> + <blockquote cite="https://www.openssl.org/news/secadv_20150108.txt"> + <p> + A memory leak can occur in the dtls1_buffer_record function under certain + conditions. In particular this could occur if an attacker sent repeated DTLS + records with the same sequence number but for the next epoch. The memory leak + could be exploited by an attacker in a Denial of Service attack through memory + exhaustion. + </p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2015-0206</cvename> + <url>https://www.openssl.org/news/secadv_20150108.txt</url> + </references> + <dates> + <discovery>2015-01-08</discovery> + <entry>2015-01-22</entry> + </dates> + </vuln> + <vuln vid="cc294a2c-a232-11e4-8e9f-0011d823eebd"> <topic>Adobe Flash Player -- multiple vulnerabilities</topic> <affects> |