| Package | Affected versions | Patched versions |
|---|---|---|
| openssl | = 0.9.8m= 0.9.8n= 0.9.8o= 0.9.8p= 0.9.8r= 0.9.8s= 0.9.8t= 0.9.8u= 0.9.8v= 0.9.8w= 0.9.8x≤ 0.9.8k |
OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection, a different vulnerability than CVE-2011-5094. NOTE: it can also be argued that it is the responsibility of server deployments, not a security library, to prevent or limit renegotiation when it is inappropriate within a specific environment
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free