| Package | Affected versions | Patched versions |
|---|---|---|
| zxid | = 0.1= 0.10= 0.11= 0.12= 0.13= 0.14= 0.15= 0.16= 0.17= 0.18= 0.19= 0.2= 0.20= 0.21= 0.22= 0.25= 0.26= 0.27= 0.28= 0.3= 0.4= 0.5= 0.6= 0.7= 0.8= 0.9≤ 0.29 |
ZXID 0.29 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free