Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2003-0544
HistoryNov 17, 2003 - 5:00 a.m.

CVE-2003-0544

2003-11-1705:00:00
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

9.1 High

AI Score

Confidence

High

0.378 Low

EPSS

Percentile

97.2%

JSON

OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.

Affected configurations

NVD
Node
opensslopensslMatch0.9.6
OR
opensslopensslMatch0.9.7

Related

cve 1
debiancve 1
cert 2
openssl 1
ubuntucve 1
cvelist 1
redhat 1
nessus 20
debian 3
openvas 12
suse 1
osv 2
securityvulns 3
cisco 1
redhatcve 1
oraclelinux 3
cve
cve
CVE-2003-0544
2003-11-17 05:00:00
debiancve
debiancve
CVE-2003-0544
2003-11-17 05:00:00
cert
cert
OpenSSL contains integer overflow handling ASN.1 tags (2)
2003-09-30 00:00:00
Multiple vulnerabilities in SSL/TLS implementations
2003-09-30 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2003-0544
2003-09-30 00:00:00
ubuntucve
ubuntucve
CVE-2003-0544
2003-11-17 00:00:00
cvelist
cvelist
CVE-2003-0544
2003-10-01 04:00:00
redhat
redhat
(RHSA-2003:293) openssl security update
2003-09-30 00:00:00
nessus
nessus
OpenSSL 0.9.6 < 0.9.6k Multiple Vulnerabilities
2012-01-04 00:00:00
RHEL 2.1 : openssl (RHSA-2003:293)
2004-07-06 00:00:00
Debian DSA-393-1 : openssl - denial of service
2004-09-29 00:00:00
debian
debian
[SECURITY] [DSA-393-1] New OpenSSL packages correct denial of service issues
2003-10-01 00:00:00
[SECURITY] [DSA 394-1] New openssl095 packages fix denial of service
2003-10-11 13:54:07
[SECURITY] [DSA 394-1] New openssl095 packages fix denial of service
2003-10-11 13:54:07
openvas
openvas
OpenSSL: Vulnerabilities in ASN.1 parsing (CVE-2003-0543, CVE-2003-0544) - Linux
2021-08-13 00:00:00
OpenSSL: Vulnerabilities in ASN.1 parsing (CVE-2003-0543, CVE-2003-0544) - Windows
2021-08-13 00:00:00
Debian Security Advisory DSA 393-1 (openssl)
2008-01-17 00:00:00
suse
suse
remote denial-of-service in openssl
2003-10-01 17:18:32
osv
osv
openssl095 - ASN.1 parsing vulnerability
2003-10-11 00:00:00
openssl - denial of service
2003-10-01 00:00:00
securityvulns
securityvulns
CERT Advisory CA-2003-26 Multiple Vulnerabilities in SSL/TLS Implementations
2003-10-03 00:00:00
[Full-Disclosure] [OpenSSL Advisory] Vulnerabilities in ASN.1 parsing
2003-09-30 00:00:00
Subject: [OpenPKG-SA-2003.044] OpenPKG Security Advisory &#40;openssl&#41;
2003-09-30 00:00:00
cisco
cisco
SSL Implementation Vulnerabilities
2003-09-30 23:30:00
redhatcve
redhatcve
CVE-2005-1730
2015-10-30 10:15:31
oraclelinux
oraclelinux
openssl-fips security update
2015-04-02 00:00:00
openssl security update
2019-03-13 00:00:00
openssl security update
2019-08-16 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

9.1 High

AI Score

Confidence

High

0.378 Low

EPSS

Percentile

97.2%

JSON
Related for NVD:CVE-2003-0544
cve1debiancve1cert2openssl1ubuntucve1cvelist1redhat1nessus20debian3openvas12suse1osv2securityvulns3cisco1redhatcve1oraclelinux3