Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak (timing discrepancy) that may make it easier to launch cryptographic attacks that rely on distinguishing between padding and MAC verification errors, possibly leading to extraction of the original plaintext, aka the "Vaudenay timing attack."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSL CBC错误信息泄露漏洞
Vulnerability Description
OpenSSL 0.9.7a之前的版本和0.9.6i之前的0.9.6版本中s3_pkt.c的ssl3_get_record如果使用不正确分组密码进行填充，将不执行MAC计算，可以导致信息泄露（时序差异），该漏洞可能更容易导致凭借区分填充和MAC检验错误差别的加密攻击，并且可能导致原始明文被提取，也称为“Vaudenay timing attack”。
CVSS Information
N/A
Vulnerability Type
N/A