65 matches found
CVE-2021-23839
CVE-2021-23839 describes a padding-check logic error in OpenSSL 1.0.2 (affecting 1.0.2s–1.0.2x) where RSA_padding_check_SSLv23() mis-handles SSLv2 rollback protection. The bug causes a server configured for SSLv2 in combination with newer TLS versions to accept connections when a version-rollback...
CVE-2021-23839: Use of a Broken or Risky Cryptographic Algorithm
OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater th...
PT-2021-15560
Name of the Vulnerable Software and Affected Versions: OpenSSL versions 1.0.2s through 1.0.2x Description: The issue arises when a client attempts to negotiate SSLv2 with a server that supports both SSLv2 and more recent SSL and TLS versions. A check for a version rollback attack is made when...
Incorrect SSLv2 rollback protection
OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater th...
