[{"CVE":"CVE-2015-3644","severity":"important","public_date":"2015-05-14T00:00:00Z","advisories":[],"bugzilla":"1221673","bugzilla_description":"CVE-2015-3644 stunnel: authentication bypass with the \"redirect\" option","cvss_score":6.4,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3644.json"},{"CVE":"CVE-2014-0016","severity":"moderate","public_date":"2014-03-05T00:00:00Z","advisories":[],"bugzilla":"1072180","bugzilla_description":"CVE-2014-0016 stunnel: Improper initialization of PRNG after fork()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0016.json"},{"CVE":"CVE-2013-1762","severity":"moderate","public_date":"2013-03-03T00:00:00Z","advisories":["RHSA-2013:0714"],"bugzilla":"917839","bugzilla_description":"CVE-2013-1762 Stunnel: buffer overflow vulnerability due to incorrect integer conversion in the NTLM authentication of the CONNECT protocol negotiation","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["stunnel-0:4.29-3.el6_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1762.json"},{"CVE":"CVE-2011-2940","severity":"important","public_date":"2011-08-18T00:00:00Z","advisories":[],"bugzilla":"732068","bugzilla_description":"CVE-2011-2940 stunnel: heap corruption flaw in 4.4x leads to remote DoS and possible code execution","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-2940.json"}]