Lucene search

K
mageiaGentoo FoundationMGASA-2018-0190
HistoryApr 03, 2018 - 9:48 p.m.

Updated openssl packages fix security vulnerability

2018-04-0321:48:20
Gentoo Foundation
advisories.mageia.org
24

0.008 Low

EPSS

Percentile

81.7%

Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe (CVE-2018-0739).

OSVersionArchitecturePackageVersionFilename
Mageia5noarchopenssl< 1.0.2o-1openssl-1.0.2o-1.mga5
Mageia6noarchopenssl< 1.0.2o-1openssl-1.0.2o-1.mga6