Debian/openssl: high 7.5
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process m
Action: Upgrade openssl to 1.0.1g-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.1g-1 | - |
Fixed versions
| 1.0.1g-1 |
Sources
published · modified · JSON