Skip to content
OpenAdvisories
Unscored DLA-1330-1 1 CVE

openssl - security update

Published Mar 30, 2018 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 openssl 1.0.1t-1+deb7u4

Vulnerabilities 1

  • Unscored —
    CVE-2018-0739 EPSS 19%

    Constructed ASN.1 types with a recursive definition could exceed the stack

    Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL…