CVE Vulnerabilities

CVE-2008-7129

Published: Aug 31, 2009 | Modified: Aug 17, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

XySSL before 0.9 allows remote attackers to cause a denial of service (infinite loop) via an X.509 certificate that does not pass the RSA signature check during verification.

Affected Software

Name Vendor Start Version End Version
Xyssl Xyssl 0.1 0.1
Xyssl Xyssl 0.2 0.2
Xyssl Xyssl 0.3 0.3
Xyssl Xyssl 0.4 0.4
Xyssl Xyssl 0.5 0.5
Xyssl Xyssl 0.6 0.6
Xyssl Xyssl 0.7 0.7
Xyssl Xyssl * 0.8
Xyssl Ubuntu hardy *
Xyssl Ubuntu upstream *

References