OpenSSL 1.0.2

A free and open Source toolkit that was created in order to bring the Secure Sockets Layer and Transport Layer Security protocols to developers

  Add it to your Download Basket!

 Add it to your Watch List!

0/5

Rate it!

What's new in OpenSSL 1.0.2:

  • SRTP Memory Leak. - A flaw in the DTLS SRTP extension parsing code allows an attacker, who sends a carefully crafted handshake message, to cause OpenSSL to fail to free up to 64k of memory causing a memory leak. This could be exploited in a Denial Of Service attack. This issue affects OpenSSL 1.0.1 server implementations for both SSL/TLS and DTLS regardless of whether SRTP is used or configured. Implementations of OpenSSL that have been compiled with OPENSSL_NO_SRTP defined are not affected.
  • The fix was developed by the OpenSSL team. (CVE-2014-3513) [OpenSSL team]
  • Session Ticket Memory Leak. - When an OpenSSL SSL/TLS/DTLS server receives a session ticket the integrity of that ticket is first verified. In the event of a session ticket integrity check failing, OpenSSL will fail to free memory causing a memory leak. By sending a large number of invalid session tickets an attacker could exploit this issue in a Denial Of Service attack. (CVE-2014-3567) [Steve Henson]
  • Build option no-ssl3 is incomplete. - When OpenSSL is configured with "no-ssl3" as a build option, servers could accept and complete a SSL 3.0 handshake, and clients could be configured to send them. (CVE-2014-3568) [Akamai and the OpenSSL team]
Read full changelog
report
malware
send us
an update
LICENSE TYPE:
Freeware 
FILE SIZE:
5.3 MB
USER RATING:
3.2/5 13
DEVELOPED BY:
The OpenSSL Project
CATEGORY:
Home \ Security
1 OpenSSL Screenshot:
OpenSSL
OpenSSL brings the the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols but also includes a general purpose cryptography library.

The OpenSSL project is managed and maintained by a worldwide community of volunteers that use the Internet to plan, communicate, and develop the OpenSSL toolkit and its related documentation.

Last updated on January 23rd, 2015

Runs on: Mac OS X (-)

#ssl toolkit #tls toolkit #cryptography library #ssl #tls #cryptography #library

Add your review! 2 USER REVIEWS SO FAR

SUBMIT