| Package | Affected versions | Patched versions |
|---|---|---|
| xyssl | = 0.1= 0.2= 0.3= 0.4= 0.5= 0.6= 0.7≤ 0.8 |
The ssl_parse_client_key_exchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free