Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libio-socket-ssl-perl@0.80-2
purl pkg:deb/debian/libio-socket-ssl-perl@0.80-2
Next non-vulnerable version 1.76-2
Latest non-vulnerable version 1.76-2
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-1tg7-y8sc-2ufr
Aliases:
CVE-2009-3024
An error in the hostname matching of IO::Socket::SSL might enable remote attackers to conduct man-in-the-middle attacks.
1.33-1+squeeze1
Affected by 1 other vulnerability.
VCID-fhba-6pke-eqhd
Aliases:
CVE-2010-4334
The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open to VERIFY_NONE instead of throwing an error when a ca_file/ca_path cannot be verified, which allows remote attackers to bypass intended certificate restrictions.
1.76-2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-13T05:08:51.240795+00:00 Debian Oval Importer Affected by VCID-fhba-6pke-eqhd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-13T05:03:59.076046+00:00 Debian Oval Importer Affected by VCID-1tg7-y8sc-2ufr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0