Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hq62-5x3m-5577

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The ssl_parse_client_key_exchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors.

The ssl_parse_client_key_exchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors.

EPSS

Процентиль: 66%
0.00519
Низкий

Связанные уязвимости

ubuntu
больше 16 лет назад

The ssl_parse_client_key_exchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors.

nvd
больше 16 лет назад

The ssl_parse_client_key_exchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors.

debian
больше 16 лет назад

The ssl_parse_client_key_exchange function in XySSL before 0.9 does no ...

EPSS

Процентиль: 66%
0.00519
Низкий