Vulnerability in OpenSSL - Invalid GOST parameters DoS Attack

🗓️ 04 Jan 2012 00:00:00Reported by OpenSSLType

openssl🔗 www.openssl-library.org👁 33 Views

Vulnerability in OpenSSL - Invalid GOST parameters DoS Attack. Malicious TLS client can crash the server due to lack of error checking. Only affects OpenSSL GOST ENGINE users

Reporter	Title	Published	Views	Family All 72
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Express for UNIX is affected by multiple vulnerabilities in OpenSSL	24 Jul 202022:49	–	ibm
IBM Security Bulletins	Security Bulletin: Tivoli Management Framework affected by vulnerabilities in OpenSSL versions prior to 1.0.0	25 Sep 202223:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Enterprise for UNIX is affected by multiple vulnerabilities in OpenSSL	25 Sep 202220:45	–	ibm
IBM Security Bulletins	Security Bulletin: Storage HMC OpenSSL upgrade to address cryptographic vulnerabilities.	18 Jun 201800:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are affected by multiple vulnerabilities in OpenSSL	25 Sep 202223:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by multiple OpenSSL vulnerabilities	26 Sep 202205:45	–	ibm
Tenable Nessus	OpenSSL 0.9.8 < 0.9.8s / 1.x < 1.0.0f Multiple Vulnerabilities	5 Jan 201200:00	–	nessus
Tenable Nessus	OpenSSL 0.9.8 < 0.9.8s / 1.x < 1.0.0f Multiple Vulnerabilities	5 Jan 201200:00	–	nessus
Tenable Nessus	FreeBSD : OpenSSL -- multiple vulnerabilities (78cc8a46-3e56-11e1-89b4-001ec9578670)	16 Jan 201200:00	–	nessus
Tenable Nessus	GLSA-201203-12 : OpenSSL: Multiple vulnerabilities	6 Mar 201200:00	–	nessus

Vulners

Node

openssl opensslRange1.0.0–1.0.0f

04 Jan 2012 00:00Current

9.1High risk

Vulners AI Score9.1

EPSS0.00697