Debian/openssl: unknown
The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive
Action: Upgrade openssl to 1.0.0f-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0f-1 | - |
Fixed versions
| 1.0.0f-1 |
Sources
- osv: DEBIAN-CVE-2011-4576#Debian:14/openssl
- https://security-tracker.debian.org/tracker/CVE-2011-4576
published · modified · JSON