Wind River Support Network

Description

The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3572

Other Downloads

• Wind River Linux 7.0.0.14
• Wind River Linux 7.0.0.15
• Wind River Linux 7.0.0.16
• Wind River Linux 7.0.0.17
• Wind River Linux 7.0.0.18
• Wind River Linux 7.0.0.19
• Wind River Linux 7.0.0.20
• Wind River Linux 7.0.0.21
• Wind River Linux 7.0.0.22
• Wind River Linux 7.0.0.23
• Wind River Linux 7.0.0.24
• Wind River Linux 7.0.0.25
• Wind River Linux 7.0.0.26
• Wind River Linux 7.0.0.27
• Wind River Linux 7.0.0.28
• Wind River Linux 7.0.0.29
• Wind River Linux 7.0.0.30
• Wind River Linux 7.0.0.31

CVEs

• CVE-2014-3572