Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.Test your applications
- Snyk ID SNYK-DEBIAN11-OPENSSL-525332
- published 5 Mar 2010
- disclosed 5 Mar 2010
How to fix?
There is no fixed version for
Note: Versions mentioned in the description apply only to the upstream
openssl package and not the
openssl package as distributed by
How to fix? for
Debian:11 relevant fixed versions and status.
OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a "fault-based attack."
- X-force Vulnerability Report