PatchTheCVEcrypt blowfish vulnerabilities and fixes
Recent CVEs affecting crypt blowfish, with upgrade or downgrade steps. 2 tracked.
Also searched as: cryptblowfish.
crypt blowfish has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2011-08-25. Highest priority: CVE-2011-2483 (score 41/100).
- CVE-2011-2483 MEDIUM 5.0 UPGRADE UPGRADE crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and othe
- CVE-2006-0591 LOW 1.2 DOWNGRADE The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in c
FAQ
How do I fix crypt blowfish vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is crypt blowfish being exploited right now?
None of the tracked crypt blowfish CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which crypt blowfish CVE should I patch first?
CVE-2011-2483 currently ranks highest (41/100): crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and othe.