tocsin

Debian/openssl: unknown

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial

Action: Upgrade openssl to 1.0.1k-1 or later.

Affected

introducedfixedlast affected
01.0.1k-1-

Fixed versions

1.0.1k-1

Sources

published · modified · JSON