New OpenSSL vulnerability could be the next Heartbleed

Status
Not open for further replies.
S

sinu

Thread author
The OpenSSL Project team has issued a warning about a new "high severity" flaw. More details about it will be released on Thursday.

"The OpenSSL project team would like to announce the forthcoming release of OpenSSL versions 1.0.2d and 1.0.1p. These releases will be made available on 9th July. They will fix a single security defect classified as 'high' severity. This defect does not affect the 1.0.0 or 0.9.8 releases". This alert and update information was released on Monday.


The OpenSSL Project is a global community of volunteers that are working towards developing an open source toolkit that include Secure Sockets Layer (SSL), Transport Layer Security (TLS) protocols and also has a strong general purpose cryptography library. This open source toolkit is meant to be a full-feature, commercial grade toolkit.

This new alert has got the entire industry talking because of the 2014 OpenSSL-Heartbleed connection. At the 2014 Codenomicon, the security engineers found a bug that could give the hackers access to all the user passwords. But that wasn’t the end of the story. The bug could also allow the hackers to trick the users into using fake versions of popular websites.

That bug was then called Heartbleed. It affected most of the Internet.
 
  • Like
Reactions: Koroke San
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top