The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-1923.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade openssl | Jul 30, 2024 | Jun 20, 2012 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Mar 5, 2026 | Jun 20, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 13, 2011 |
| Suse | — | Upgrade libopenssl0_9_8-hmac-32bitUpgrade libopenssl0_9_8-hmacUpgrade libopenssl0_9_8-32bitUpgrade libopenssl-develUpgrade libopenssl0_9_8Upgrade openssl-docUpgrade opensslUpgrade libopenssl0_9_8-x86 | Dec 12, 2013 | Jul 9, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub