CVE-2003-0078
NoneCVSS
—
EPSS
13.7%
Published
Mar 3, 2003
CISA due date
—
The record
ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak (timing discrepancy) that may make it easier to launch cryptographic attacks that rely on distinguishing between padding and MAC verification errors, possibly leading to extraction of the original plaintext, aka the "Vaudenay timing attack."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | openssl | 0 | 0.9.7a-1 |
| Debian:12 | openssl | 0 | 0.9.7a-1 |
| Debian:13 | openssl | 0 | 0.9.7a-1 |
| Debian:3.0 | openssl | 0 | 0.9.6c-2.woody.2 |
Related vulnerabilities
- CVE-2024-2511 Issue summary: Some non-default TLS server configurations can cause unbounded memory… Also affects openssl
- CVE-2024-0727 Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash… Also affects openssl
- CVE-2022-0778 The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can… Also affects openssl
- CVE-2021-3712 ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which… Also affects openssl
- CVE-2021-3449 An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello… Also affects openssl
- CVE-2021-3450 The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates… Also affects openssl
- CVE-2021-23840 Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the… Also affects openssl
- CVE-2020-1967 Server or client applications that call the SSL_check_chain() function during or after a… Also affects openssl