Description
XySSL before 0.9 allows remote attackers to cause a denial of service (infinite loop) via an X.509 certificate that does not pass the RSA signature check during verification.
References
- ADV-2008-0917 vdb-entry
- 49101 vdb-entry
- xyssl-x509-dos(41255) vdb-entry
- http://polarssl.org/?archive#001c