Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4qpr-78cg-wp5p

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.

EPSS

Процентиль: 56%
0.00332
Низкий

Связанные уязвимости

nvd
больше 19 лет назад

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940.

EPSS

Процентиль: 56%
0.00332
Низкий