CVE-2002-1568 in OpenSSLالمعلومات

الملخص

بحسب MITRE

OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service (crash) via certain messages that cause OpenSSL to abort from a failed assertion, as demonstrated using SSLv2 CLIENT_MASTER_KEY messages, which are not properly handled in s2_srvr.c.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

حجز

06/10/2003

إفشاء

17/11/2003

الاعتدال

تمت الموافقة

إدخال

VDB-20954

EPSS

0.02733

KEV

لا

النشاطات

منخفض جدًا

المصادر

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!