|
|
| |
|
| |
openssl: denial of service
| Package(s): | openssl |
CVE #(s): | CVE-2011-0014
|
| Created: | February 11, 2011 |
Updated: | May 19, 2011 |
| Description: |
From the openssl advisory:
Incorrectly formatted ClientHello handshake messages could cause OpenSSL
to parse past the end of the message.
This issue applies to the following versions:
1) OpenSSL 0.9.8h through 0.9.8q
2) OpenSSL 1.0.0 through 1.0.0c
The parsing function in question is already used on arbitrary data so no
additional vulnerabilities are expected to be uncovered by this.
However, an attacker may be able to cause a crash (denial of service) by
triggering invalid memory accesses.
|
| Alerts: |
|
( Log in to post comments)
|
|
|