Описание
OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | released | 0.9.8a-7ubuntu0.6 |
| devel | released | 0.9.8g-14ubuntu2 |
| gutsy | released | 0.9.8e-5ubuntu3.3 |
| hardy | released | 0.9.8g-4ubuntu3.4 |
| intrepid | released | 0.9.8g-10.1ubuntu2.1 |
| upstream | released | 0.9.8j |
Показывать по
EPSS
5.8 Medium
CVSS2
Связанные уязвимости
OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
OpenSSL 0.9.8i and earlier does not properly check the return value fr ...
OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
EPSS
5.8 Medium
CVSS2