{"action":"Upgrade openssl to 1.0.2o-r0 or later.","affected":[{"introduced":"1.1.0"}],"component":"openssl","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.5","exploited":false,"fixed_versions":["1.0.2o-r0"],"id":"tcs_01M5N9Y1VB9VG299RF51V7JVB4","modified_at":"2026-10-23T17:17:55.145325261Z","published_at":"2018-03-27T21:29:00.610Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2018-0733","https://security.alpinelinux.org/vuln/CVE-2018-0733"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2018-0733#Alpine:v3.5/openssl","url":"https://osv.dev/vulnerability/ALPINE-CVE-2018-0733"}],"summary":"Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that woul"}