openssl: denial of service
| Package(s): | openssl | CVE #(s): | CVE-2009-0590 | ||||||||||||||||||||||||||||||||||||||||||||||||||||
| Created: | March 31, 2009 | Updated: | July 27, 2011 | ||||||||||||||||||||||||||||||||||||||||||||||||||||
| Description: | From the Ubuntu advisory: It was discovered that OpenSSL did not properly validate the length of an encoded BMPString or UniversalString when printing ASN.1 strings. If a user or automated system were tricked into processing a crafted certificate, an attacker could cause a denial of service via application crash in applications linked against OpenSSL. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||