DSA-4400: -1 openssl1.0 -- security update

Published Feb 28, 2019

Updated

Juraj Somorovsky, Robert Merget and Nimrod Aviram discovered a padding oracle attack in OpenSSL.

Affected Software

2 affected components

debian/openssl1.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade openssl1.0 to a version that resolves this vulnerability.
Patch DSA-4400-1

Event History

Feb 28, 2019

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2019-1559

Frequently Asked Questions

What must an attacker be able to do to exploit this issue?

The issue is described as a padding oracle attack in OpenSSL. The provided advisory data does not specify the required network position, protocol configuration, or other preconditions for exploitation.

Which Debian package is covered by this security update?

The advisory covers the Debian openssl1.0 package.

When was this advisory published?

The advisory was published on 2019-02-28 and was last modified on the same date.

DSA-4400: -1 openssl1.0 -- security update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What must an attacker be able to do to exploit this issue?

Which Debian package is covered by this security update?

When was this advisory published?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker be able to do to exploit this issue?

Which Debian package is covered by this security update?

When was this advisory published?