Lucene search

K
osvGoogleOSV:USN-5328-2
HistoryMar 15, 2022 - 6:12 p.m.

openssl vulnerability

2022-03-1518:12:12
Google
osv.dev
16
usn-5328-1
openssl
vulnerability
ubuntu 14.04
ubuntu 16.04
denial of service

AI Score

7.8

Confidence

High

EPSS

0.015

Percentile

87.3%

USN-5328-1 fixed a vulnerability in OpenSSL. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

Tavis Ormandy discovered that OpenSSL incorrectly parsed certain
certificates. A remote attacker could possibly use this issue to cause
OpenSSH to stop responding, resulting in a denial of service.