CVE-2003-0545

Опубликовано: 17 нояб. 2003

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Высокий

Описание

Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding.

Ссылки

http://secunia.com/advisories/22249
Broken Link
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg21247112
Broken Link
http://www.cert.org/advisories/CA-2003-26.html
Third Party Advisory
US Government Resource
http://www.debian.org/security/2003/dsa-394
Broken Link
http://www.kb.cert.org/vuls/id/935264
Third Party Advisory
US Government Resource
http://www.redhat.com/support/errata/RHSA-2003-292.html
Broken Link
Patch
Vendor Advisory
http://www.securityfocus.com/bid/8732
Broken Link
Third Party Advisory
VDB Entry
http://www.uniras.gov.uk/vuls/2003/006489/openssl.htm
Broken Link
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2006/3900
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2590
Broken Link
http://secunia.com/advisories/22249
Broken Link
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg21247112
Broken Link
http://www.cert.org/advisories/CA-2003-26.html
Third Party Advisory
US Government Resource
http://www.debian.org/security/2003/dsa-394
Broken Link
http://www.kb.cert.org/vuls/id/935264
Third Party Advisory
US Government Resource
http://www.redhat.com/support/errata/RHSA-2003-292.html
Broken Link
Patch
Vendor Advisory
http://www.securityfocus.com/bid/8732
Broken Link
Third Party Advisory
VDB Entry
http://www.uniras.gov.uk/vuls/2003/006489/openssl.htm
Broken Link
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2006/3900
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2590
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.74574

Высокий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-415

Связанные уязвимости

CVE-2003-0545

CVSS3: 9.8

ubuntu

больше 21 года назад

Описание отсутствует

CVE-2003-0545

redhat

больше 21 года назад

CVE-2003-0545

CVSS3: 9.8

debian

больше 21 года назад

Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to ...

GHSA-mmjc-3g2p-897m

CVSS3: 9.8

github

около 3 лет назад

BDU:2015-01443

fstec

больше 21 года назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 99%

0.74574

Высокий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-415