Description
The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the "Klima-Pokorny-Rosa attack."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 0.9.7b-1 | — |
| Debian 13 | openssl | 0.9.7b-1 | — |
| Debian 12 | openssl | 0.9.7b-1 | — |
| Debian 3.0 | openssl | 0.9.6c-2.woody.3 | DSA-288 |
Advisories 1
- DSA-288 openssl - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- DSA-288 vendor-advisory
- RHSA-2003:101 vendor-advisory
- RHSA-2003:102 vendor-advisory
- 2003-0013 vendor-advisory
- http://eprint.iacr.org/2003/052/
- oval:org.mitre.oval:def:461 vdb-entry signature
- GLSA-200303-20 vendor-advisory
- SuSE-SA:2003:024 vendor-advisory
- 7148 vdb-entry
- http://lists.apple.com/mhonarc/security-announce/msg00028.html
- OpenPKG-SA-2003.026 vendor-advisory
- http://www.linuxsecurity.com/advisories/immunix_advisory-3066.html
- IMNX-2003-7+-001-01 vendor-advisory
- http://www.openssl.org/news/secadv_20030319.txt
- MDKSA-2003:035 vendor-advisory
- 20030324 GLSA: openssl (200303-20) mailing-list
- ssl-premaster-information-leak(11586) vdb-entry
- 20030319 [OpenSSL Advisory] Klima-Pokorny-Rosa attack on PKCS #1 v1.5 padding mailing-list
- VU#888801 third-party-advisory
- CLA-2003:625 vendor-advisory