The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl | Aug 30, 2017 | Feb 8, 2013 |
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2013-004 | Aug 28, 2015 | Feb 8, 2013 |
| Apple Osx Openssl | — | Apply OS X security update 2013-004Upgrade macOS to the latest version | Sep 17, 2013 | Feb 8, 2013 |
| Debian | — | Upgrade openssl | Jul 30, 2024 | Feb 8, 2013 |
| Freebsd | — | Upgrade openssl | Dec 10, 2025 | Feb 6, 2013 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Oct 30, 2017 | Feb 8, 2013 |
| Hpux | — | Update hpuxwsAPACHE.AUTH_LDAP to the latest versionUpdate hpuxwsAPACHE.PHP to the latest versionUpdate hpuxwsAPACHE.APACHE to the latest versionUpdate hpuxwsAPACHE.MOD_PERL2 to the latest versionUpdate hpuxwsAPACHE.PHP2 to the latest versionUpdate hpuxwsAPACHE.WEBPROXY to the latest versionUpdate hpuxwsAPACHE.MOD_PERL to the latest versionUpdate hpuxwsAPACHE.APACHE2 to the latest versionUpdate hpuxwsAPACHE.AUTH_LDAP2 to the latest versionUpdate hpuxwsAPACHE.MOD_JK2 to the latest versionUpdate hpuxwsAPACHE.MOD_JK to the latest version | Aug 11, 2017 | Feb 8, 2013 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Feb 8, 2013 | Feb 8, 2013 |
| Oracle Solaris | — | Upgrade library/security/openssl to version 1.0.0.11-0.175.1.7.0.4.0 on Solaris 11.1Upgrade library/security/openssl/openssl-fips-140 to version 1.2-0.175.1.7.0.4.0 on Solaris 11.1 | May 29, 2017 | Feb 8, 2013 |
| Suse | — | Upgrade openssl-1_1Upgrade libopenssl1_1-hmac-32bitUpgrade opensslUpgrade openssl-1_0_0-docUpgrade libopenssl1_1Upgrade libopenssl1_1-hmacUpgrade openssl1Upgrade libopenssl1-develUpgrade libopenssl1_0_0-hmac-32bitUpgrade libopenssl1_0_0-hmacUpgrade libopenssl-1_0_0-develUpgrade libopenssl-1_1-develUpgrade libopenssl-fips-providerUpgrade libopenssl-develUpgrade libopenssl1_0_0-32bitUpgrade openssl-1_0_0Upgrade libopenssl-1_1-devel-32bitUpgrade openssl1-docUpgrade libopenssl1_0_0Upgrade openssl-docUpgrade libopenssl1_1-32bit | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libssl0.9.8Upgrade libssl1.0.0 | Nov 8, 2024 | Feb 8, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub