Endeca Server
1 CVEs
product
Monthly
If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.
OpenSSL
Information Disclosure
Oracle
Ubuntu Linux
Debian Linux
+79
NVD
CVSS 3.1
5.9
EPSS
17.1%
EPSS 17%
CVSS 5.9
MEDIUM
PATCH
This Month
If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.
OpenSSL
Information Disclosure
Oracle
+81
NVD