2 matches found
Denial Of Service (DoS)
OpenSSL is vulnerable to denial of service DoS attacks. A malicious user can pass an unrecognized X.660 OID to the hash function to the system to cause an infinite loop that can cause the system to crash...
5CVSS7.2AI score0.22328EPSS
SaveExploits0References52Affected Software2
CVE-2015-1792: Undefined Security Weakness
The dofreeupto function in crypto/cms/cmssmime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service infinite loop via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an...
5CVSS7.3AI score0.22328EPSS
SaveExploits0References2
20