ADV200007 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. OpenSSL Remote Denial of Service Vulnerability

Which CVE IDs does ADV200007 cover?

ADV200007 covers the following CVE IDs: ADV200007. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by ADV200007?

ADV200007 affects 1 product, including: OpenSSL 1.1.1g.

ADV200007High

OpenSSL Remote Denial of Service Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

April 21, 2020

Last Modified

—

🔗 CVE IDs covered (1)

ADV200007 · pending

📋 Description

Microsoft is aware of a publicly disclosed remote denial of service vulnerability for OpenSSL version 1.1.1d and newer. Previous versions prior to 1.1.1d are unaffected. The vulnerability is fixed in version 1.1.1g. For more information, please see the OpenSSL security advisory. Microsoft has confirmed Windows is not affected by this vulnerability. We are currently investigating the wider impact and are applying mitigations to services as needed. Recommended Actions If you are running a Linux VM or have installed any products that use OpenSSL on Azure, please review the version on your system. We recommend that you check the security blog for the distro you are using.

🎯 Affected products1

OpenSSL 1.1.1g

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (1)

patchhttps://www.openssl.org/source/