2 matches found
PT-2015-1684 · Openssl · Openssl
Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to 1.0.2a Description: The issue is related to the ASN.1 signature-verification implementation in the rsa item verify function. It allows remote attackers to cause a denial of service, resulting in a NULL pointer...
PT-2015-1685 · Openssl +1 · Openssl +3
Name of the Vulnerable Software and Affected Versions: OpenSSL versions 1.0.2 through 1.0.2a excluding 1.0.2a Description: The issue is related to the ssl3 client hello function in OpenSSL, which does not ensure the proper initialization of the pseudorandom number generator PRNG before the...