CVE-2012-0027 in OpenSSL
요약 (영어)
The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
예약하다
2011. 12. 07.
공개
2012. 01. 05.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 4519 | OpenSSL GOST ENGINE 서비스 거부 | 399 | 정의되지 않음 | 공식 수정 | CVE-2012-0027 |