Approved changes feed: RSS · Atom

cpe:2.3:a:xyssl:xyssl:0.1:*:*:*:*:*:*:*

part: a version: 0.1 update: *

VendorXyssl (c11b0223-bb5e-5ebe-803b-2c6c8fbcd357)
ProductXyssl (a4861886-fd79-5a69-9581-9c53069038ca)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-7129 vulnerable 2026-06-08 04:51:05.664434 Details available
XySSL before 0.9 allows remote attackers to cause a denial of service (infinite loop) via an X.509 certificate that does not pass the RSA signature check during verification.
Published: 2009-08-31T10:00:00.000Z
Updated: 2024-08-07T11:56:14.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7128 vulnerable 2026-06-08 04:51:05.660905 Details available
The ssl_parse_client_key_exchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors.
Published: 2009-08-31T10:00:00.000Z
Updated: 2024-08-07T11:56:14.250Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.