| Package | Affected versions | Patched versions |
|---|---|---|
| openssl | = 0.9.8h= 0.9.8i= 0.9.8j |
The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote attackers to repudiate a signature that originally appeared to be valid but was actually invalid.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free