CVE-2008-7129 XySSL before 0.9 allows remote attackers to cause a denial of service (infinite loop) via an X.509 certificate that does not pass the RSA signature check during verification.
MediumCVSS 5.0
EPSS 0.88%
- Published
- Updated
- Exploit status
- No public exploit known
Description
XySSL before 0.9 allows remote attackers to cause a denial of service (infinite loop) via an X.509 certificate that does not pass the RSA signature check during verification.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xyssl | <= 0.8 | No fix listed |
| xyssl | = 0.1 | No fix listed |
| xyssl | = 0.2 | No fix listed |
| xyssl | = 0.3 | No fix listed |
| xyssl | = 0.4 | No fix listed |
| xyssl | = 0.5 | No fix listed |
| xyssl | = 0.6 | No fix listed |
| xyssl | = 0.7 | No fix listed |
References
- 49101 vdb-entry
- polarssl.org
- ADV-2008-0917 patch vdb-entry vendor-advisory
- xyssl-x509-dos(41255) vdb-entry