| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| openssl | = 1.0.0= 1.0.0a= 1.0.0b= 1.0.0c= 1.0.0d= 1.0.0e= 1.0.0f= 1.0.0g= 1.0.0h= 1.0.0i= 1.0.0j= 1.0.0k= 1.0.0l= 1.0.0m= 1.0.0n= 1.0.0o= 1.0.0p= 1.0.0q= 1.0.0r= 1.0.1= 1.0.1a= 1.0.1b= 1.0.1c= 1.0.1d= 1.0.1e= 1.0.1f= 1.0.1g= 1.0.1h= 1.0.1i= 1.0.1j= 1.0.1k= 1.0.1l= 1.0.1m= 1.0.2= 1.0.2a≤ 0.9.8zf |
Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí