Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 8 | openssl | 1.0.1t-1+deb8u8 |
| Debian · 9 | openssl | 1.1.0f-3+deb9u2 |
Vulnerabilities 1
-
Unscored —CVE-2018-0739 EPSS 19%
Constructed ASN.1 types with a recursive definition could exceed the stack
Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL…