Title: OpenSSL Malformed ASN.1 Structure Resource Consumption DoS
Info
Disclosure
Sep 28, 2006
Discovery
Unknown
Dates
Exploit
Unknown
Solution
Unknown
Description
OpenSSL contains a flaw that may allow a remote denial of service. The issue is triggered due to an error in processing malformed ASN.1 structures which may lead to infinite loop and consumption of memory, and will result in loss of availability for the service.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service
Impact:
Loss of Availability
Disclosure:
OSVDB Verified
Solution
Upgrade to version 0.9.7l, 0.9.8d or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.