DSA-4348: -1 openssl -- security update
Published Nov 30, 2018
·Updated
openssl - security update
Other sources
Several local side channel attacks and a denial of service via large Diffie-Hellman parameters were discovered in OpenSSL, a Secure Sockets Layer toolkit.
Affected Software
2 affected components
debian/openssl
debian/openssl
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch DSA-4348-1
Event History
Nov 30, 2018
Advisory Published
12:00 AM
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
Who can exploit the side-channel issues?
The reported side-channel attacks are local, so an attacker would need local access to the affected system.
2
What denial-of-service condition is identified?
A denial of service can be triggered using large Diffie-Hellman parameters.