logo
DATABASE RESOURCES PRICING ABOUT US

Vulnerability in OpenSSL - CMS and S/MIME Bleichenbacher attack

Description

A weakness in the OpenSSL CMS and PKCS #7 code can be exploited using Bleichenbacher's attack on PKCS #1 v1.5 RSA padding also known as the million message attack (MMA). Only users of CMS, PKCS #7, or S/MIME decryption operations are affected, SSL/TLS applications are not affected by this issue.


Related