Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | openssl1.0 | 1.0.2l-2+deb9u3 |
Vulnerabilities 1
-
Unscored —CVE-2018-0739 EPSS 19%
Constructed ASN.1 types with a recursive definition could exceed the stack
Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL…