Denial of Service in OpenSSL ASN.1 Parsing
CVE-2003-0851
Currently unrated
Key Information:
- Vendor
- Cisco
- Vendor
- CVE Published:
- 1 December 2003
Summary
An issue in OpenSSL versions prior to 0.9.7 can be exploited by remote attackers to cause a denial of service condition. This occurs through the processing of malformed ASN.1 sequences, which can result in a crash due to excessive recursion during parsing. This vulnerability underscores the importance of proper input validation and the necessity of keeping security libraries up to date to mitigate risks.
References
EPSS Score
6% chance of being exploited in the next 30 days.
Timeline
Vulnerability published
Vulnerability Reserved