CVE-2003-0851 OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.
MediumCVSS 5.0
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | = 12.1(11)e | No fix listed |
| cisco ios | = 12.1(11b)e | No fix listed |
| cisco ios | = 12.2sx | No fix listed |
| cisco ios | = 12.2sy | No fix listed |
| cisco css11000 content services switch | All versions | No fix listed |
| cisco pix firewall | = 6.2.2_.111 | No fix listed |
| OpenSSL | = 0.9.6 | No fix listed |
| OpenSSL | = 0.9.6a | No fix listed |
| OpenSSL | = 0.9.6b | No fix listed |
| OpenSSL | = 0.9.6c | No fix listed |
| OpenSSL | = 0.9.6d | No fix listed |
| OpenSSL | = 0.9.6e | No fix listed |
| OpenSSL | = 0.9.6f | No fix listed |
| OpenSSL | = 0.9.6g | No fix listed |
| OpenSSL | = 0.9.6h | No fix listed |
| OpenSSL | = 0.9.6i | No fix listed |
| OpenSSL | = 0.9.6j | No fix listed |
| OpenSSL | = 0.9.6k | No fix listed |
| OpenSSL | = 0.9.7 | No fix listed |
| OpenSSL | = 0.9.7a | No fix listed |
| OpenSSL | = 0.9.7b | No fix listed |
| cisco pix firewall software | = 6.0 | No fix listed |
| cisco pix firewall software | = 6.0(1) | No fix listed |
| cisco pix firewall software | = 6.0(2) | No fix listed |
| cisco pix firewall software | = 6.0(3) | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco pix firewall software | = 6.0(4) | No fix listed |
| cisco pix firewall software | = 6.0(4.101) | No fix listed |
| cisco pix firewall software | = 6.1 | No fix listed |
| cisco pix firewall software | = 6.1(1) | No fix listed |
| cisco pix firewall software | = 6.1(2) | No fix listed |
| cisco pix firewall software | = 6.1(3) | No fix listed |
| cisco pix firewall software | = 6.1(4) | No fix listed |
| cisco pix firewall software | = 6.1(5) | No fix listed |
| cisco pix firewall software | = 6.2 | No fix listed |
| cisco pix firewall software | = 6.2(1) | No fix listed |
| cisco pix firewall software | = 6.2(2) | No fix listed |
| cisco pix firewall software | = 6.2(3) | No fix listed |
| cisco pix firewall software | = 6.3(1) | No fix listed |
| cisco pix firewall software | = 6.3(3.102) | No fix listed |
References
- 20031104 [OpenSSL Advisory] Denial of Service in ASN.1 parsing mailing-list
- 20040508 [FLSA-2004:1395] Updated OpenSSL resolves security vulnerability mailing-list
- RHSA-2004:119 vendor-advisory
- 17381 third-party-advisory
- 20030930 SSL Implementation Vulnerabilities vendor-advisory
- VU#412478 patch third-party-advisory us-government-resource
- www.openssl.org patch vendor-advisory
- FEDORA-2005-1042 vendor-advisory
- 8970 patch vdb-entry vendor-advisory
- oval:org.mitre.oval:def:5528 signature vdb-entry