A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Libressl | — | Apply OS X security update 2017-001 El CapitanUpgrade macOS to the latest version | Mar 28, 2017 | Mar 28, 2017 |
| Apple Osx Openssl | — | Upgrade macOS to the latest version | Mar 28, 2017 | Mar 28, 2017 |
| Debian | — | Upgrade openssl | Jan 28, 2017 | Jan 10, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 31, 2017 |
| Freebsd | — | Upgrade libressl-develUpgrade opensslUpgrade libressl | Jan 12, 2017 | Jan 11, 2017 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Mar 5, 2026 | Sep 10, 2018 |
| Ibm Http_server | — | Apply IBM HTTP Server Interim Fix PI91913Apply IBM HTTP Server Interim Fix PI94222 | Nov 9, 2018 | Sep 10, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 10, 2018 |
| Suse | — | Upgrade libopenssl10Upgrade libopenssl1_1-hmac-32bitUpgrade libopenssl-1_1-develUpgrade libopenssl1_1-hmacUpgrade libopenssl-devel-32bitUpgrade libopenssl1_0_0-x86Upgrade libopenssl0_9_8-x86Upgrade opensslUpgrade libopenssl0_9_8-hmacUpgrade openssl1Upgrade openssl-1_1Upgrade libopenssl0_9_8-hmac-32bitUpgrade libopenssl0_9_8-32bitUpgrade libopenssl1_1-32bitUpgrade libopenssl0_9_8Upgrade libopenssl1_0_0-hmacUpgrade libopenssl1_0_0Upgrade libopenssl1_0_0-hmac-32bitUpgrade libopenssl1_1Upgrade libopenssl1_0_0-32bitUpgrade libopenssl1-develUpgrade libopenssl-1_1-devel-32bitUpgrade openssl-1_0_0Upgrade sles12sp1-docker-imageUpgrade openssl-docUpgrade openssl1-docUpgrade libopenssl-1_0_0-develUpgrade libopenssl-devel | Feb 8, 2017 | Jan 10, 2017 |
| Ubuntu | — | Upgrade libssl1.0.0 | Feb 1, 2017 | Jan 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub