| Package | Affected versions | Patched versions |
|---|---|---|
| node.js | ≥ 0.10.0, < 0.10.41≥ 0.12.0, < 0.12.9≥ 4.0.0, < 4.2.3≥ 5.0.0, < 5.1.1 | 0.10.410.12.94.2.35.1.1 |
| openssl | = 1.0.1= 1.0.1a= 1.0.1b= 1.0.1c= 1.0.1d= 1.0.1e= 1.0.1f= 1.0.1g= 1.0.1h= 1.0.1i= 1.0.1j= 1.0.1k= 1.0.1l= 1.0.1m= 1.0.1n= 1.0.1o= 1.0.1p= 1.0.2= 1.0.2a= 1.0.2b= 1.0.2c= 1.0.2d |
crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free