{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "OpenSSL 1.x versions ant\u00e9rieures \u00e0 1.0.0f ;",
      "product": {
        "name": "OpenSSL",
        "vendor": {
          "name": "OpenSSL",
          "scada": false
        }
      }
    },
    {
      "description": "OpenSSL 0.x versions ant\u00e9rieures \u00e0 0.9.8s.",
      "product": {
        "name": "OpenSSL",
        "vendor": {
          "name": "OpenSSL",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s corrig\u00e9es dans OpenSSL permettent \u00e0 une\npersonne malveillante d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance, de\nprovoquer un d\u00e9ni de service \u00e0 distance, ou de porter atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-4619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4619"
    },
    {
      "name": "CVE-2011-4576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4576"
    },
    {
      "name": "CVE-2011-4577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4577"
    },
    {
      "name": "CVE-2011-4108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4108"
    },
    {
      "name": "CVE-2011-4109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4109"
    },
    {
      "name": "CVE-2012-0027",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0027"
    }
  ],
  "initial_release_date": "2012-01-10T00:00:00",
  "last_revision_date": "2012-01-31T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 HP du 19 janvier 2012\u00a0:",
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03141193"
    }
  ],
  "reference": "CERTA-2012-AVI-006",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2012-01-10T00:00:00.000000"
    },
    {
      "description": "ajout du bulletin de s\u00e9curit\u00e9 HP.",
      "revision_date": "2012-01-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s corrig\u00e9es dans OpenSSL permettent\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance, ou une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans OpenSSL",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 OpenSSL du 04 janvier 2012",
      "url": "http://openssl.org/news/secadv_20120104.txt"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Versions AIX 5.3, 6.1, 7.1 et pr\u00e9cedentes ;",
      "product": {
        "name": "AIX",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Versions 2.X et 1.5.2.",
      "product": {
        "name": "AIX",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s li\u00e9es \u00e0 OpenSSL ont \u00e9t\u00e9 corrig\u00e9es.\nL\u0027exploitation de ces vuln\u00e9rabilit\u00e9s peut entrainer un d\u00e9chiffrement\npartiel des communications.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2012-0050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0050"
    },
    {
      "name": "CVE-2011-4619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4619"
    },
    {
      "name": "CVE-2011-4576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4576"
    },
    {
      "name": "CVE-2011-4108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4108"
    },
    {
      "name": "CVE-2011-4109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4109"
    }
  ],
  "initial_release_date": "2012-03-26T00:00:00",
  "last_revision_date": "2012-03-26T00:00:00",
  "links": [],
  "reference": "CERTA-2012-AVI-171",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2012-03-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s dans \u003cspan class=\"textit\"\u003eIBM AIX\u003c/span\u003e ont\n\u00e9t\u00e9 corrig\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans IBM AIX",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM AIX du 22 mars 2012",
      "url": "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "VMware ESX version 4.1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware vCO version 4.0.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware vCenter version 5.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware vCOps version 1.0.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware ESXi version 3.5 ;",
      "product": {
        "name": "ESXi",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Update Manager version 5.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Update Manager version 4.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware vCO version 4.1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware ESXi version 4.1 ;",
      "product": {
        "name": "ESXi",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware vCenter version 4.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware vCenter version 4.1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware vCOps version 5.0.2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware ESXi version 4.0 ;",
      "product": {
        "name": "ESXi",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware VirtualCenter version 2.5 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware Update Manager version 4.1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware ESXi version 5.0 ;",
      "product": {
        "name": "ESXi",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware ESX version 4.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    },
    {
      "description": "VMware ESX version 3.5 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "VMware",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-1833",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1833"
    },
    {
      "name": "CVE-2012-0050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0050"
    },
    {
      "name": "CVE-2011-4132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4132"
    },
    {
      "name": "CVE-2011-4609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4609"
    },
    {
      "name": "CVE-2012-0207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0207"
    },
    {
      "name": "CVE-2011-5057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-5057"
    },
    {
      "name": "CVE-2010-4252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-4252"
    },
    {
      "name": "CVE-2011-4619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4619"
    },
    {
      "name": "CVE-2012-2110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2110"
    },
    {
      "name": "CVE-2011-4576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4576"
    },
    {
      "name": "CVE-2011-2496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2496"
    },
    {
      "name": "CVE-2009-5064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-5064"
    },
    {
      "name": "CVE-2011-4577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4577"
    },
    {
      "name": "CVE-2009-5029",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-5029"
    },
    {
      "name": "CVE-2012-1569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1569"
    },
    {
      "name": "CVE-2011-4324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4324"
    },
    {
      "name": "CVE-2011-4110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4110"
    },
    {
      "name": "CVE-2011-4108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4108"
    },
    {
      "name": "CVE-2012-1583",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1583"
    },
    {
      "name": "CVE-2010-2761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2761"
    },
    {
      "name": "CVE-2012-0060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0060"
    },
    {
      "name": "CVE-2012-0391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0391"
    },
    {
      "name": "CVE-2011-4325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4325"
    },
    {
      "name": "CVE-2010-0830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0830"
    },
    {
      "name": "CVE-2012-0061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0061"
    },
    {
      "name": "CVE-2010-4180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-4180"
    },
    {
      "name": "CVE-2012-0864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0864"
    },
    {
      "name": "CVE-2011-3209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3209"
    },
    {
      "name": "CVE-2010-4410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-4410"
    },
    {
      "name": "CVE-2012-0392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0392"
    },
    {
      "name": "CVE-2012-0394",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0394"
    },
    {
      "name": "CVE-2012-0815",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0815"
    },
    {
      "name": "CVE-2011-3188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3188"
    },
    {
      "name": "CVE-2011-1020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1020"
    },
    {
      "name": "CVE-2011-4109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4109"
    },
    {
      "name": "CVE-2012-1573",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1573"
    },
    {
      "name": "CVE-2011-4128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4128"
    },
    {
      "name": "CVE-2012-0841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0841"
    },
    {
      "name": "CVE-2011-2484",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2484"
    },
    {
      "name": "CVE-2012-0393",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0393"
    },
    {
      "name": "CVE-2011-3597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3597"
    },
    {
      "name": "CVE-2011-3363",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3363"
    },
    {
      "name": "CVE-2011-2699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2699"
    },
    {
      "name": "CVE-2011-0014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-0014"
    },
    {
      "name": "CVE-2011-1089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1089"
    }
  ],
  "initial_release_date": "2012-09-03T00:00:00",
  "last_revision_date": "2012-09-03T00:00:00",
  "links": [],
  "reference": "CERTA-2012-AVI-479",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2012-09-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans les produits \u003cspan\nclass=\"textit\"\u003eVMware\u003c/span\u003e. Elles concernent les \u00e9l\u00e9ments d\u0027\u00e9diteurs\ntiers impl\u00e9ment\u00e9s dans les solutions. Les \u00e9l\u00e9ments suivants ont \u00e9t\u00e9s mis\n\u00e0 jour :\n\n-   Java Runtime Environment (JRE) ;\n-   OpenSSL ;\n-   le noyau ;\n-   Perl ;\n-   libxml2 ;\n-   glibc ;\n-   GnuTLS ;\n-   popt et rpm ;\n-   Apache struts.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans VMware",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 VMware VMSA-2012-0013 du 30 ao\u00fbt 2012",
      "url": "http://www.vmware.com/security/advisories/VMSA-2012-0013.html"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eVersions ant\u00e9rieures \u00e0 OS X Mountain Lion 10.8.4\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2013-0982",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0982"
    },
    {
      "name": "CVE-2012-0050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0050"
    },
    {
      "name": "CVE-2013-0984",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0984"
    },
    {
      "name": "CVE-2013-0277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0277"
    },
    {
      "name": "CVE-2013-1856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1856"
    },
    {
      "name": "CVE-2011-3210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3210"
    },
    {
      "name": "CVE-2013-1855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1855"
    },
    {
      "name": "CVE-2013-0276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0276"
    },
    {
      "name": "CVE-2011-4619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4619"
    },
    {
      "name": "CVE-2013-0985",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0985"
    },
    {
      "name": "CVE-2012-2110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2110"
    },
    {
      "name": "CVE-2011-4576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4576"
    },
    {
      "name": "CVE-2011-4577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4577"
    },
    {
      "name": "CVE-2013-0983",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0983"
    },
    {
      "name": "CVE-2013-0989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0989"
    },
    {
      "name": "CVE-2011-4108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4108"
    },
    {
      "name": "CVE-2013-0990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0990"
    },
    {
      "name": "CVE-2013-0155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0155"
    },
    {
      "name": "CVE-2013-0986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0986"
    },
    {
      "name": "CVE-2013-0988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0988"
    },
    {
      "name": "CVE-2013-1024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1024"
    },
    {
      "name": "CVE-2013-0975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0975"
    },
    {
      "name": "CVE-2011-4109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4109"
    },
    {
      "name": "CVE-2011-3207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3207"
    },
    {
      "name": "CVE-2012-5519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5519"
    },
    {
      "name": "CVE-2011-1945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1945"
    },
    {
      "name": "CVE-2013-0987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0987"
    },
    {
      "name": "CVE-2012-4929",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4929"
    },
    {
      "name": "CVE-2013-1854",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1854"
    },
    {
      "name": "CVE-2013-0333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0333"
    },
    {
      "name": "CVE-2012-2333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2333"
    },
    {
      "name": "CVE-2013-1857",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1857"
    },
    {
      "name": "CVE-2012-2131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2131"
    }
  ],
  "initial_release_date": "2013-06-05T00:00:00",
  "last_revision_date": "2013-06-05T00:00:00",
  "links": [],
  "reference": "CERTA-2013-AVI-340",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-06-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eApple OS X\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un contournement\nde la politique de s\u00e9curit\u00e9 et une atteinte \u00e0 la confidentialit\u00e9 des\ndonn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple OS X",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple HT5784 du 04 juin 2013",
      "url": "http://support.apple.com/kb/HT5784"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eJuniper Junos Space versions ant\u00e9rieures \u00e0 15.1R1\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-0460",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0460"
    },
    {
      "name": "CVE-2010-1429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1429"
    },
    {
      "name": "CVE-2013-1557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1557"
    },
    {
      "name": "CVE-2011-4619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4619"
    },
    {
      "name": "CVE-2013-2389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2389"
    },
    {
      "name": "CVE-2012-2110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2110"
    },
    {
      "name": "CVE-2013-3805",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3805"
    },
    {
      "name": "CVE-2013-3801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3801"
    },
    {
      "name": "CVE-2015-0975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0975"
    },
    {
      "name": "CVE-2011-4576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4576"
    },
    {
      "name": "CVE-2010-0738",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0738"
    },
    {
      "name": "CVE-2014-6491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6491"
    },
    {
      "name": "CVE-2010-1428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1428"
    },
    {
      "name": "CVE-2013-1502",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1502"
    },
    {
      "name": "CVE-2013-1544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1544"
    },
    {
      "name": "CVE-2013-2392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2392"
    },
    {
      "name": "CVE-2014-0429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0429"
    },
    {
      "name": "CVE-2013-0166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0166"
    },
    {
      "name": "CVE-2014-0456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0456"
    },
    {
      "name": "CVE-2013-3804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3804"
    },
    {
      "name": "CVE-2012-0884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0884"
    },
    {
      "name": "CVE-2015-2620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-2620"
    },
    {
      "name": "CVE-2014-0098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0098"
    },
    {
      "name": "CVE-2013-3809",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3809"
    },
    {
      "name": "CVE-2014-0453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0453"
    },
    {
      "name": "CVE-2013-0169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0169"
    },
    {
      "name": "CVE-2014-1568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-1568"
    },
    {
      "name": "CVE-2014-0423",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0423"
    },
    {
      "name": "CVE-2013-3808",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3808"
    },
    {
      "name": "CVE-2013-3783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3783"
    },
    {
      "name": "CVE-2014-0224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-0224"
    },
    {
      "name": "CVE-2014-4263",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4263"
    },
    {
      "name": "CVE-2014-6500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6500"
    },
    {
      "name": "CVE-2014-6495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6495"
    },
    {
      "name": "CVE-2012-3143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3143"
    },
    {
      "name": "CVE-2013-2422",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2422"
    },
    {
      "name": "CVE-2014-6494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6494"
    },
    {
      "name": "CVE-2013-2376",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2376"
    },
    {
      "name": "CVE-2013-2249",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2249"
    },
    {
      "name": "CVE-2015-3209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3209"
    },
    {
      "name": "CVE-2013-3794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3794"
    },
    {
      "name": "CVE-2011-4109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4109"
    },
    {
      "name": "CVE-2012-0818",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0818"
    },
    {
      "name": "CVE-2013-1511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1511"
    },
    {
      "name": "CVE-2013-1862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1862"
    },
    {
      "name": "CVE-2014-6478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6478"
    },
    {
      "name": "CVE-2014-6559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6559"
    },
    {
      "name": "CVE-2014-3413",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3413"
    },
    {
      "name": "CVE-2014-4244",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4244"
    },
    {
      "name": "CVE-2013-3802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3802"
    },
    {
      "name": "CVE-2013-3839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3839"
    },
    {
      "name": "CVE-2013-3812",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3812"
    },
    {
      "name": "CVE-2013-2375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2375"
    },
    {
      "name": "CVE-2015-7753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7753"
    },
    {
      "name": "CVE-2014-6496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6496"
    },
    {
      "name": "CVE-2013-6438",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-6438"
    },
    {
      "name": "CVE-2013-1896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1896"
    },
    {
      "name": "CVE-2013-1532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1532"
    },
    {
      "name": "CVE-2013-2391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2391"
    },
    {
      "name": "CVE-2014-4264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4264"
    },
    {
      "name": "CVE-2013-3793",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3793"
    },
    {
      "name": "CVE-2011-5245",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-5245"
    },
    {
      "name": "CVE-2013-1537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1537"
    },
    {
      "name": "CVE-2015-0501",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0501"
    },
    {
      "name": "CVE-2012-2333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2333"
    },
    {
      "name": "CVE-2013-5908",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-5908"
    }
  ],
  "initial_release_date": "2016-09-08T00:00:00",
  "last_revision_date": "2016-09-08T00:00:00",
  "links": [],
  "reference": "CERTFR-2016-AVI-300",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2016-09-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eles produits Juniper\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9\ndes donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10698 du 07 septembre 2016",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10698\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10659 du 07 septembre 2016",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10659\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10627 du 07 septembre 2016",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10627\u0026cat=SIRT_1\u0026actp=LIST"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Juniper Networks SRC Series versions ant\u00e9rieures \u00e0 4.12.0R6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Juniper Networks Contrail Networking versions ant\u00e9rieures \u00e0 1911.31",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Juniper Junos OS Evolved versions ant\u00e9rieures \u00e0 19.3R2-S5-EVO, 19.4R2-S2-EVO, 20.1R1-S2-EVO, 20.1R1-S4-EVO, 20.1R2-S1-EVO, 20.2R1-EVO, 20.3R1-S1-EVO, 20.3R2-EVO et 20.4R1-EVO",
      "product": {
        "name": "Junos OS Evolved",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Juniper Junos OS versions ant\u00e9rieures \u00e0 12.3R12-S17, 12.3X48-D105, 14.1X53-D53, 15.1R7-S6, 15.1R7-S7, 15.1R7-S8, 15.1X49-D230, 15.1X49-D240, 16.1R7-S7, 16.1R7-S8, 17.1R2-S11, 17.2R3-S3, 17.2R3-S4, 17.3R2-S5, 17.3R3-S10, 17.3R3-S7, 17.3R3-S8, 17.3R3-S9, 17.4R2-S11, 17.4R2-S12, 17.4R2-S9, 17.4R3, 17.4R3-S2, 17.4R3-S3, 17.4R3-S4, 18.1R3-S10, 18.1R3-S11, 18.1R3-S12, 18.1R3-S9, 18.2R2-S7, 18.2R2-S8, 18.2R3-S3, 18.2R3-S4, 18.2R3-S5, 18.2R3-S6, 18.2R3-S7, 18.2X75-D34, 18.3R2-S4, 18.3R3-S1, 18.3R3-S2, 18.3R3-S3, 18.3R3-S4, 18.4R1-S5, 18.4R1-S8, 18.4R2-S3, 18.4R2-S5, 18.4R2-S6, 18.4R2-S7, 18.4R3, 18.4R3-S1, 18.4R3-S2, 18.4R3-S3, 18.4R3-S4, 18.4R3-S5, 18.4R3-S6, 19.1R1-S4, 19.1R1-S5, 19.1R1-S6, 19.1R2-S1, 19.1R2-S2, 19.1R3, 19.1R3-S2, 19.1R3-S3, 19.2R1-S2, 19.2R1-S5, 19.2R1-S6, 19.2R2, 19.2R2-S1, 19.2R3, 19.2R3-S1, 19.3R2, 19.3R2-S1, 19.3R2-S3, 19.3R2-S4, 19.3R2-S5, 19.3R3, 19.3R3-S1, 19.4R1, 19.4R1-S2, 19.4R1-S3, 19.4R2, 19.4R2-S1, 19.4R2-S2, 19.4R2-S3, 19.4R3, 19.4R3-S1, 20.1R1 , 20.1R1-S2, 20.1R1-S3, 20.1R1-S4, 20.1R2, 20.2R1, 20.2R1-S1, 20.2R1-S2, 20.2R1-S3, 20.2R2, 20.3R1, 20.3R1-S1, 20.3R2 et 20.4R1",
      "product": {
        "name": "Junos OS",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-0207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-0207"
    },
    {
      "name": "CVE-2021-0222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-0222"
    },
    {
      "name": "CVE-2018-20997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-20997"
    },
    {
      "name": "CVE-2010-0742",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0742"
    },
    {
      "name": "CVE-2013-1741",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1741"
    },
    {
      "name": "CVE-2021-0206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-0206"
    },
    {
      "name": "CVE-2010-4252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-4252"
    },
    {
      "name": "CVE-2015-0292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0292"
    },
    {
      "name": "CVE-2012-2110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2110"
    },
    {
      "name": "CVE-2019-11478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11478"
    },
    {
      "name": "CVE-2021-0202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-0202"
    },
    {
      "name": "CVE-2007-5846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5846"
    },
    {
      "name": "CVE-2013-5607",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-5607"
    },
    {
      "name": "CVE-2021-0211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-0211"
    },
    {
      "name": "CVE-2014-3567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-3567"
    },
    {
      "name": "CVE-2020-8617",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-8617"
    },
    {
      "name": "CVE-2021-0203",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-0203"
    },
    {
      "name": "CVE-2021-0205",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-0205"
    },
    {
      "name": "CVE-2009-3245",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-3245"
    },
    {
      "name": "CVE-2019-11479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11479"
    },
    {
      "name": "CVE-2021-0209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-0209"
    },
    {
      "name": "CVE-2014-8176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8176"
    },
    {
      "name": "CVE-2019-11477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11477"
    },
    {
      "name": "CVE-2011-4109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4109"
    },
    {
      "name": "CVE-2010-3864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-3864"
    },
    {
      "name": "CVE-2021-0208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-0208"
    },
    {
      "name": "CVE-2019-13565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13565"
    },
    {
      "name": "CVE-2021-0212",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-0212"
    },
    {
      "name": "CVE-2020-8616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-8616"
    },
    {
      "name": "CVE-2021-0210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-0210"
    },
    {
      "name": "CVE-2014-1545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-1545"
    }
  ],
  "initial_release_date": "2021-01-14T00:00:00",
  "last_revision_date": "2021-01-14T00:00:00",
  "links": [],
  "reference": "CERTFR-2021-AVI-033",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-01-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nJuniper. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nun probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une ex\u00e9cution de\ncode arbitraire \u00e0 distance et un d\u00e9ni de service \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11096 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11096\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11098 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11098\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11097 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11097\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11094 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11094\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11104 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11104\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11099 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11099\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11093 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11093\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11101 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11101\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11088 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11088\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11092 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11092\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11091 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11091\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11100 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11100\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11095 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11095\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11090 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11090\u0026cat=SIRT_1\u0026actp=LIST"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA11102 du 13 janvier 2021",
      "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11102\u0026cat=SIRT_1\u0026actp=LIST"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A4E446D-B9D3-45F2-9722-B41FA14A6C31",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF4EA988-FC80-4170-8933-7C6663731981",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*",
              "matchCriteriaId": "64F8F53B-24A1-4877-B16E-F1917C4E4E81",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*",
              "matchCriteriaId": "75D3ACD5-905F-42BB-BE1A-8382E9D823BF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*",
              "matchCriteriaId": "766EA6F2-7FA4-4713-9859-9971CCD2FDCB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*",
              "matchCriteriaId": "EFBC30B7-627D-48DC-8EF0-AE8FA0C6EDBA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*",
              "matchCriteriaId": "2BB38AEA-BAF0-4920-9A71-747C24444770",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F33EA2B-DE15-4695-A383-7A337AC38908",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*",
              "matchCriteriaId": "261EE631-AB43-44FE-B02A-DFAAB8D35927",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA0E0BBF-D0BE-41A7-B9BB-C28F01000BC0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A1365ED-4651-4AB2-A64B-43782EA2F0E8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC82690C-DCED-47BA-AA93-4D0C9E95B806",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*",
              "matchCriteriaId": "43B90ED1-DAB4-4239-8AD8-87E8D568D5D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*",
              "matchCriteriaId": "3C9BF2DD-85EF-49CF-8D83-0DB46449E333",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*",
              "matchCriteriaId": "86C46AB8-52E5-4385-9C5C-F63FF9DB82AA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*",
              "matchCriteriaId": "564AA4E7-223E-48D8-B3E0-A461969CF530",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*",
              "matchCriteriaId": "A82CFB41-BEA5-4B5F-BCAA-9BAED22EEAF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*",
              "matchCriteriaId": "35C2AE06-B6E8-41C4-BB60-177AC4819CE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB15C1F3-0DE8-4A50-B17C-618ECA58AABF",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de doble liberaci\u00f3n en OpenSSL v0.9.8 antes de v0.9.8s, cuando la opci\u00f3n X509_V_FLAG_POLICY_CHECK est\u00e1 activada, permite a atacantes remotos tener un impacto no especificado al provocar el fallo de un control de la pol\u00edtica."
    }
  ],
  "id": "CVE-2011-4109",
  "lastModified": "2026-04-29T01:13:23.040",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2012-01-06T01:55:00.830",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://marc.info/?l=bugtraq\u0026m=132750648501816\u0026w=2"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://marc.info/?l=bugtraq\u0026m=134039053214295\u0026w=2"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1306.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1307.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1308.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/48528"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://support.apple.com/kb/HT5784"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.debian.org/security/2012/dsa-2390"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/737740"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:006"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:007"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.openssl.org/news/secadv_20120104.txt"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72129"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=132750648501816\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=134039053214295\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1306.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1307.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1308.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/48528"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.apple.com/kb/HT5784"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2012/dsa-2390"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/737740"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:006"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:007"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.openssl.org/news/secadv_20120104.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72129"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2011-4109"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2012-01-06T01:55:00Z",
    "severity": "HIGH"
  },
  "details": "Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.",
  "id": "GHSA-fr6r-xw3f-g957",
  "modified": "2022-05-17T01:52:29Z",
  "published": "2022-05-17T01:52:29Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4109"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72129"
    },
    {
      "type": "WEB",
      "url": "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc"
    },
    {
      "type": "WEB",
      "url": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=132750648501816\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq\u0026m=134039053214295\u0026w=2"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1306.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1307.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1308.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/48528"
    },
    {
      "type": "WEB",
      "url": "http://support.apple.com/kb/HT5784"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2012/dsa-2390"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/737740"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:006"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:007"
    },
    {
      "type": "WEB",
      "url": "http://www.openssl.org/news/secadv_20120104.txt"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2011-4109",
    "description": "Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.",
    "id": "GSD-2011-4109",
    "references": [
      "https://www.suse.com/security/cve/CVE-2011-4109.html",
      "https://www.debian.org/security/2012/dsa-2390",
      "https://access.redhat.com/errata/RHSA-2012:1308",
      "https://access.redhat.com/errata/RHSA-2012:1307",
      "https://access.redhat.com/errata/RHSA-2012:1306",
      "https://access.redhat.com/errata/RHSA-2012:0168",
      "https://access.redhat.com/errata/RHSA-2012:0060",
      "https://linux.oracle.com/cve/CVE-2011-4109.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2011-4109"
      ],
      "details": "Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.",
      "id": "GSD-2011-4109",
      "modified": "2023-12-13T01:19:05.543367Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2011-4109",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html",
            "refsource": "MISC",
            "url": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html"
          },
          {
            "name": "http://support.apple.com/kb/HT5784",
            "refsource": "MISC",
            "url": "http://support.apple.com/kb/HT5784"
          },
          {
            "name": "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc",
            "refsource": "MISC",
            "url": "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc"
          },
          {
            "name": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html",
            "refsource": "MISC",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html"
          },
          {
            "name": "http://marc.info/?l=bugtraq\u0026m=132750648501816\u0026w=2",
            "refsource": "MISC",
            "url": "http://marc.info/?l=bugtraq\u0026m=132750648501816\u0026w=2"
          },
          {
            "name": "http://marc.info/?l=bugtraq\u0026m=134039053214295\u0026w=2",
            "refsource": "MISC",
            "url": "http://marc.info/?l=bugtraq\u0026m=134039053214295\u0026w=2"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2012-1306.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1306.html"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2012-1307.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1307.html"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2012-1308.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2012-1308.html"
          },
          {
            "name": "http://secunia.com/advisories/48528",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/48528"
          },
          {
            "name": "http://www.debian.org/security/2012/dsa-2390",
            "refsource": "MISC",
            "url": "http://www.debian.org/security/2012/dsa-2390"
          },
          {
            "name": "http://www.kb.cert.org/vuls/id/737740",
            "refsource": "MISC",
            "url": "http://www.kb.cert.org/vuls/id/737740"
          },
          {
            "name": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:006",
            "refsource": "MISC",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:006"
          },
          {
            "name": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:007",
            "refsource": "MISC",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:007"
          },
          {
            "name": "http://www.openssl.org/news/secadv_20120104.txt",
            "refsource": "MISC",
            "url": "http://www.openssl.org/news/secadv_20120104.txt"
          },
          {
            "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72129",
            "refsource": "MISC",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72129"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2011-4109"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-399"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.openssl.org/news/secadv_20120104.txt",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.openssl.org/news/secadv_20120104.txt"
            },
            {
              "name": "MDVSA-2012:006",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:006"
            },
            {
              "name": "MDVSA-2012:007",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2012:007"
            },
            {
              "name": "SUSE-SU-2012:0084",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html"
            },
            {
              "name": "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc"
            },
            {
              "name": "48528",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/48528"
            },
            {
              "name": "SSRT100891",
              "refsource": "HP",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=134039053214295\u0026w=2"
            },
            {
              "name": "RHSA-2012:1306",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1306.html"
            },
            {
              "name": "RHSA-2012:1307",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1307.html"
            },
            {
              "name": "RHSA-2012:1308",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2012-1308.html"
            },
            {
              "name": "SSRT100729",
              "refsource": "HP",
              "tags": [],
              "url": "http://marc.info/?l=bugtraq\u0026m=132750648501816\u0026w=2"
            },
            {
              "name": "DSA-2390",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2012/dsa-2390"
            },
            {
              "name": "APPLE-SA-2013-06-04-1",
              "refsource": "APPLE",
              "tags": [],
              "url": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html"
            },
            {
              "name": "http://support.apple.com/kb/HT5784",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://support.apple.com/kb/HT5784"
            },
            {
              "name": "VU#737740",
              "refsource": "CERT-VN",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/737740"
            },
            {
              "name": "openssl-policy-checks-dos(72129)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72129"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-08-29T01:30Z",
      "publishedDate": "2012-01-06T01:55Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated openssl packages that fix multiple security issues are now\navailable for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)\nand Transport Layer Security (TLS v1) protocols, as well as a\nfull-strength, general purpose cryptography library.\n\nIt was discovered that the Datagram Transport Layer Security (DTLS)\nprotocol implementation in OpenSSL leaked timing information when\nperforming certain operations. A remote attacker could possibly use this\nflaw to retrieve plain text from the encrypted packets by using a DTLS\nserver as a padding oracle. (CVE-2011-4108)\n\nA double free flaw was discovered in the policy checking code in OpenSSL.\nA remote attacker could use this flaw to crash an application that uses\nOpenSSL by providing an X.509 certificate that has specially-crafted\npolicy extension data. (CVE-2011-4109)\n\nAn information leak flaw was found in the SSL 3.0 protocol implementation\nin OpenSSL. Incorrect initialization of SSL record padding bytes could\ncause an SSL client or server to send a limited amount of possibly\nsensitive data to its SSL peer via the encrypted connection.\n(CVE-2011-4576)\n\nIt was discovered that OpenSSL did not limit the number of TLS/SSL\nhandshake restarts required to support Server Gated Cryptography. A remote\nattacker could use this flaw to make a TLS/SSL server using OpenSSL consume\nan excessive amount of CPU by continuously restarting the handshake.\n(CVE-2011-4619)\n\nAll OpenSSL users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues. For the update to take effect,\nall services linked to the OpenSSL library must be restarted, or the system\nrebooted.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2012:0060",
        "url": "https://access.redhat.com/errata/RHSA-2012:0060"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "771770",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771770"
      },
      {
        "category": "external",
        "summary": "771771",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771771"
      },
      {
        "category": "external",
        "summary": "771775",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771775"
      },
      {
        "category": "external",
        "summary": "771780",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771780"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0060.json"
      }
    ],
    "title": "Red Hat Security Advisory: openssl security update",
    "tracking": {
      "current_release_date": "2026-01-28T22:34:22+00:00",
      "generator": {
        "date": "2026-01-28T22:34:22+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.16"
        }
      },
      "id": "RHSA-2012:0060",
      "initial_release_date": "2012-01-24T20:59:00+00:00",
      "revision_history": [
        {
          "date": "2012-01-24T20:59:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2012-01-24T21:02:38+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-28T22:34:22+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client-5.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "RHEL Desktop Workstation (v. 5 client)",
                "product": {
                  "name": "RHEL Desktop Workstation (v. 5 client)",
                  "product_id": "5Client-Workstation-5.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server-5.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-perl-0:0.9.8e-20.el5_7.1.i386",
                "product": {
                  "name": "openssl-perl-0:0.9.8e-20.el5_7.1.i386",
                  "product_id": "openssl-perl-0:0.9.8e-20.el5_7.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-20.el5_7.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-20.el5_7.1.i386",
                "product": {
                  "name": "openssl-0:0.9.8e-20.el5_7.1.i386",
                  "product_id": "openssl-0:0.9.8e-20.el5_7.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-20.el5_7.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
                  "product_id": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-20.el5_7.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-0:0.9.8e-20.el5_7.1.i386",
                "product": {
                  "name": "openssl-devel-0:0.9.8e-20.el5_7.1.i386",
                  "product_id": "openssl-devel-0:0.9.8e-20.el5_7.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-20.el5_7.1?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-20.el5_7.1.i686",
                "product": {
                  "name": "openssl-0:0.9.8e-20.el5_7.1.i686",
                  "product_id": "openssl-0:0.9.8e-20.el5_7.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-20.el5_7.1?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
                  "product_id": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-20.el5_7.1?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
                "product": {
                  "name": "openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
                  "product_id": "openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-20.el5_7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-20.el5_7.1.x86_64",
                "product": {
                  "name": "openssl-0:0.9.8e-20.el5_7.1.x86_64",
                  "product_id": "openssl-0:0.9.8e-20.el5_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-20.el5_7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
                  "product_id": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-20.el5_7.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
                "product": {
                  "name": "openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
                  "product_id": "openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-20.el5_7.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-20.el5_7.1.src",
                "product": {
                  "name": "openssl-0:0.9.8e-20.el5_7.1.src",
                  "product_id": "openssl-0:0.9.8e-20.el5_7.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-20.el5_7.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
                "product": {
                  "name": "openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
                  "product_id": "openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-20.el5_7.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-20.el5_7.1.ia64",
                "product": {
                  "name": "openssl-0:0.9.8e-20.el5_7.1.ia64",
                  "product_id": "openssl-0:0.9.8e-20.el5_7.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-20.el5_7.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
                  "product_id": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-20.el5_7.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
                "product": {
                  "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
                  "product_id": "openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-20.el5_7.1?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
                "product": {
                  "name": "openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
                  "product_id": "openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-20.el5_7.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-20.el5_7.1.ppc",
                "product": {
                  "name": "openssl-0:0.9.8e-20.el5_7.1.ppc",
                  "product_id": "openssl-0:0.9.8e-20.el5_7.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-20.el5_7.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
                  "product_id": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-20.el5_7.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
                "product": {
                  "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
                  "product_id": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-20.el5_7.1?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-20.el5_7.1.ppc64",
                "product": {
                  "name": "openssl-0:0.9.8e-20.el5_7.1.ppc64",
                  "product_id": "openssl-0:0.9.8e-20.el5_7.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-20.el5_7.1?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
                  "product_id": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-20.el5_7.1?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
                "product": {
                  "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
                  "product_id": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-20.el5_7.1?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
                "product": {
                  "name": "openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
                  "product_id": "openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-perl@0.9.8e-20.el5_7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-20.el5_7.1.s390x",
                "product": {
                  "name": "openssl-0:0.9.8e-20.el5_7.1.s390x",
                  "product_id": "openssl-0:0.9.8e-20.el5_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-20.el5_7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
                  "product_id": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-20.el5_7.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
                "product": {
                  "name": "openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
                  "product_id": "openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-20.el5_7.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-0:0.9.8e-20.el5_7.1.s390",
                "product": {
                  "name": "openssl-0:0.9.8e-20.el5_7.1.s390",
                  "product_id": "openssl-0:0.9.8e-20.el5_7.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl@0.9.8e-20.el5_7.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
                "product": {
                  "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
                  "product_id": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-20.el5_7.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-0:0.9.8e-20.el5_7.1.s390",
                "product": {
                  "name": "openssl-devel-0:0.9.8e-20.el5_7.1.s390",
                  "product_id": "openssl-devel-0:0.9.8e-20.el5_7.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/openssl-devel@0.9.8e-20.el5_7.1?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.i386",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.i686 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.i686",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.ia64",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.ppc",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.ppc64",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.s390",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.s390x",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.src",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.x86_64",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.i386",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.s390",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.i386",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
        "relates_to_product_reference": "5Client-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.i386",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.i686 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.i686",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.ia64",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.ppc",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.ppc64 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.ppc64",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.s390 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.s390",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.s390x",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.src as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.src",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.x86_64",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.i386",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc64 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.s390 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.s390",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.i386 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.i386",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.ia64 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.ppc as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.s390x as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.x86_64 as a component of RHEL Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
        "relates_to_product_reference": "5Client-Workstation-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.i386",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.i686 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.i686",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.ia64",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.ppc",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.ppc64",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.s390",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.s390x",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.src",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0:0.9.8e-20.el5_7.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64"
        },
        "product_reference": "openssl-0:0.9.8e-20.el5_7.1.x86_64",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64"
        },
        "product_reference": "openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.i386",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.s390",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-0:0.9.8e-20.el5_7.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64"
        },
        "product_reference": "openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.i386",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
        "relates_to_product_reference": "5Server-5.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-0:0.9.8e-20.el5_7.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
        },
        "product_reference": "openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
        "relates_to_product_reference": "5Server-5.7.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2011-4108",
      "discovery_date": "2012-01-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "771770"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: DTLS plaintext recovery attack",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the versions of openssl as shipped with Red Hat Enterprise Linux 4 as they do not include support for DTLS protocol.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-4108"
        },
        {
          "category": "external",
          "summary": "RHBZ#771770",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771770"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-4108",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-4108"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-4108",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4108"
        }
      ],
      "release_date": "2012-01-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-01-24T20:59:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259",
          "product_ids": [
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:0060"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: DTLS plaintext recovery attack"
    },
    {
      "cve": "CVE-2011-4109",
      "discovery_date": "2012-01-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "771771"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: double-free in policy checks",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the versions of openssl as shipped with Red Hat Enterprise Linux 4 and 6.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-4109"
        },
        {
          "category": "external",
          "summary": "RHBZ#771771",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771771"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-4109",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-4109"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-4109",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4109"
        }
      ],
      "release_date": "2012-01-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-01-24T20:59:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259",
          "product_ids": [
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:0060"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: double-free in policy checks"
    },
    {
      "cve": "CVE-2011-4576",
      "discovery_date": "2012-01-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "771775"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: uninitialized SSL 3.0 padding",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-4576"
        },
        {
          "category": "external",
          "summary": "RHBZ#771775",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771775"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-4576",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-4576"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-4576",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4576"
        }
      ],
      "release_date": "2012-01-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-01-24T20:59:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259",
          "product_ids": [
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:0060"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: uninitialized SSL 3.0 padding"
    },
    {
      "cve": "CVE-2011-4619",
      "discovery_date": "2012-01-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "771780"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: SGC restart DoS attack",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
          "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
          "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
          "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
          "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
          "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2011-4619"
        },
        {
          "category": "external",
          "summary": "RHBZ#771780",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771780"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-4619",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-4619"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-4619",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4619"
        }
      ],
      "release_date": "2012-01-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2012-01-24T20:59:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259",
          "product_ids": [
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2012:0060"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Client-Workstation-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Client-Workstation-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.src",
            "5Server-5.7.Z:openssl-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.i686",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-debuginfo-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.ppc64",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-devel-0:0.9.8e-20.el5_7.1.x86_64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.i386",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ia64",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.ppc",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.s390x",
            "5Server-5.7.Z:openssl-perl-0:0.9.8e-20.el5_7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: SGC restart DoS attack"
    }
  ]
}