Vulnerability & Exploit Database

Back to search

OpenSSL denial of service via malformed RFC 3779 data in certificates (CVE-2011-4577)

Severity CVSS Published Added Modified
4 (AV:N/AC:M/Au:N/C:N/I:N/A:P) January 05, 2012 January 26, 2012 February 13, 2015

Description

OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.

Free Nexpose Download

Discover, prioritize, and remediate security risks today!

 Download now

References

Solution

http-openssl-0_9_8-upgrade-0_9_8_s

Related Vulnerabilities