Debian/openssl: low 3.7
The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for
Action: Upgrade openssl to 1.0.2f-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.2f-2 | - |
Fixed versions
| 1.0.2f-2 |
Sources
- osv: DEBIAN-CVE-2016-0701#Debian:13/openssl
- https://security-tracker.debian.org/tracker/CVE-2016-0701
published · modified · JSON