Denial of Service Vulnerability in OpenSSL by OpenSSL Software Foundation

CVE-2004-0081

Summary

OpenSSL versions prior to 0.9.6d contain a flaw in the handling of unknown message types, potentially allowing a remote attacker to create conditions that result in an infinite loop, leading to a denial of service. This vulnerability can be exploited using various tools, including the Codenomicon TLS Test Tool, which can trigger the loop and incapacitate the service. Updating to the latest version is crucial to mitigate this risk.

References