p PatchFirst

CVE-2003-0131

CVE-2003-0131

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the "Klima-Pokorny-Rosa attack."

EPSS 6.9% · Fix available

Published
Updated

Stack: system · network

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • openssl Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.9.7b-1

    Update to 0.9.7b-1

  • openssl Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.9.7b-1

    Update to 0.9.7b-1

  • openssl Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.9.7b-1

    Update to 0.9.7b-1

Original sources

Check your server →