Description
OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.
References
- oval:org.mitre.oval:def:5528 vdb-entry signature
- FEDORA-2005-1042 vendor-advisory
- 17381 third-party-advisory
- 20030930 SSL Implementation Vulnerabilities vendor-advisory
- 8970 vdb-entry
- 20031104 [OpenSSL Advisory] Denial of Service in ASN.1 parsing mailing-list
- RHSA-2004:119 vendor-advisory
- http://www.openssl.org/news/secadv_20031104.txt
- VU#412478 third-party-advisory
- 20040508 [FLSA-2004:1395] Updated OpenSSL resolves security vulnerability mailing-list