| Package | Affected versions | Patched versions |
|---|---|---|
| node.js | = 6.0.0≥ 0.10.0, < 0.10.45≥ 0.12.0, < 0.12.14≥ 4.0.0, ≤ 4.1.2≥ 4.2.0, < 4.4.4≥ 5.0.0, < 5.11.1 | 0.10.450.12.144.4.45.11.1 |
| openssl | = 1.0.1= 1.0.1a= 1.0.1b= 1.0.1c= 1.0.1d= 1.0.1e= 1.0.1f= 1.0.1g= 1.0.1h= 1.0.1i= 1.0.1j= 1.0.1k= 1.0.1l= 1.0.1m= 1.0.1n= 1.0.1o= 1.0.1p= 1.0.1q= 1.0.1r= 1.0.1s= 1.0.2= 1.0.2a= 1.0.2b= 1.0.2c= 1.0.2d= 1.0.2e= 1.0.2f= 1.0.2g | |
| mysql | ≥ 5.6.0, ≤ 5.6.30≥ 5.7.0, ≤ 5.7.12 |
Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free