Lucene search
RootSSV:61276HistoryJan 03, 2014 - 12:00 a.m.
OpenSSL DTLS中间人攻击多个安全措施绕过漏洞
2014-01-0300:00:00
Root
www.seebug.org
38
0.025 Low
EPSS
Percentile
90.1%
BUGTRAQ ID: 64618
CVE(CAN) ID: CVE-2013-6450
OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。
OpenSSL 0.9.8y, 1.0.0-1.0.1e的DTLS中继实现中，摘要及加密上下文的数据结构没有被正确维护，可使中间人攻击者通过干涉数据包传输（相关ssl/d1_both.c、ssl/t1_enc.c），使用不同的上下文，获取敏感信息。
0
OpenSSL Project OpenSSL 1.0.0
厂商补丁：
OpenSSL Project
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://www.openssl.org/
http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=34628967f1e65dc8f34e000f0f5518e21afbfc7b
Related
checkpoint_advisories
checkpoint_advisories
OpenSSL DTLS Retransmission Denial of Service - Ver2 (CVE-2013-6450)
2014-12-28 00:00:00
OpenSSL DTLS Retransmission Denial of Service (CVE-2013-6450)
2014-03-09 00:00:00
debiancve
debiancve
CVE-2013-6450
2014-01-01 16:05:15
nessus
nessus
Mandriva Linux Security Advisory : openssl (MDVSA-2014:007)
2014-01-20 00:00:00
F5 Networks BIG-IP : OpenSSL vulnerability (K15158)
2014-10-10 00:00:00
Puppet Enterprise 3.x < 3.1.2 DTLS Retransmission DoS
2014-03-21 00:00:00
openvas
openvas
OpenSSL: DoS Vulnerability (CVE-2013-6450) - Linux
2021-08-17 00:00:00
OpenSSL: DoS Vulnerability (CVE-2013-6450) - Windows
2021-08-17 00:00:00
Mageia: Security Advisory (MGASA-2014-0012)
2022-01-28 00:00:00
nvd
nvd
CVE-2013-6450
2014-01-01 16:05:15
prion
prion
Information disclosure
2014-01-01 16:05:00
cve
cve
CVE-2013-6450
2014-01-01 16:05:15
ubuntucve
ubuntucve
CVE-2013-6450
2014-01-01 00:00:00
f5
f5
K15158 : OpenSSL vulnerability CVE-2013-6450
2015-02-04 00:00:00
SOL15158 - OpenSSL vulnerability CVE-2013-6450
2014-04-17 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2017-02-08 05:12:04
openssl
openssl
Vulnerability in OpenSSL CVE-2013-6450
2013-12-13 00:00:00
cvelist
cvelist
CVE-2013-6450
2014-01-01 15:00:00
debian
debian
[SECURITY] [DSA 2833-1] openssl security update
2014-01-01 12:09:10
mageia
mageia
Updated openssl package fixes security vulnerabilities
2014-01-17 04:33:19
securityvulns
securityvulns
[SECURITY] [DSA 2833-1] openssl security update
2014-01-08 00:00:00
OpenSSL security vulnerabilities
2014-01-08 00:00:00
Oracle / Sun / PeopleSoft / MySQL multiple security vulnerabilities
2015-01-25 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: openssl-1.0.1e-37.fc20
2014-01-10 07:58:51
[SECURITY] Fedora 18 Update: openssl-1.0.1e-37.fc18
2014-01-12 05:06:47
[SECURITY] Fedora 19 Update: openssl-1.0.1e-37.fc19
2014-01-10 07:45:46
ibm
ibm
amazon
amazon
Important: openssl
2014-01-14 15:56:00
redhat
redhat
(RHSA-2014:0015) Important: openssl security update
2014-01-08 00:00:00
(RHSA-2014:0416) Important: rhevm-spice-client security update
2014-04-17 00:00:00
(RHSA-2014:0041) Important: rhev-hypervisor6 security update
2014-01-21 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-14:03.openssl
2014-01-14 00:00:00
oraclelinux
oraclelinux
openssl security update
2014-01-08 00:00:00
openssl security update
2014-10-16 00:00:00
openssl-fips security update
2015-04-02 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.1f-alt1
2014-01-06 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1f-alt1
2014-01-06 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1f-alt1
2014-01-06 00:00:00
freebsd
freebsd
openssl -- multiple vulnerabilities
2014-01-06 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2014-01-09 00:00:00
aix
aix
Multiple OpenSSL vulnerabilities
2014-02-25 14:07:48
slackware
slackware
openssl
2014-01-13 22:30:19
centos
centos
openssl security update
2014-01-08 22:59:22
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2014-12-26 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2014
2014-07-15 00:00:00
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00