Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | openssl1.0 | 1.0.2l-2+deb9u2 |
Vulnerabilities 2
-
Unscored —CVE-2017-3737 EPSS 79%
OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal erro…
-
Unscored —CVE-2017-3738 EPSS 13%
There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. N…