| Package | Affected versions | Patched versions |
|---|---|---|
| helion openstack | = 2.0.0= 2.1.0= 2.1.2= 2.1.4 | |
| node.js | = 6.0.0≥ 0.10.0, < 0.10.45≥ 0.12.0, < 0.12.14≥ 4.0.0, ≤ 4.1.2≥ 4.2.0, < 4.4.4≥ 5.0.0, < 5.11.1 | 0.10.450.12.144.4.45.11.1 |
| openssl | = 1.0.2= 1.0.2a= 1.0.2b= 1.0.2c= 1.0.2d= 1.0.2e= 1.0.2f= 1.0.2g≤ 1.0.1s |
The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free