OpenSSL Information Disclosure Vulnerability
Last Update Date:
11 Jan 2017 09:57
Release Date:
11 Jan 2017
4228
Views
RISK: Medium Risk
TYPE: Security software and application - Security Software & Appliance
A vulnerability was identified in OpenSSL. A local user can recover ECDSA P-256 private keys.
Note: Currently no patch is available.
Impact
- Information Disclosure
System / Technologies affected
- Versions 1.0.1u and prior
Solutions
- Note: Currently no patch is available.
- Proposed code fix is available:
http://securitytracker.com/id/1037575
Vulnerability Identifier
Source
Related Link
Share with