Description

Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.

Remediation

References

CVE-2016-0705

Related Vulnerabilities

WordPress Plugin iframe Cross-Site Scripting (4.4)

WordPress Plugin Visitor Maps and Who's Online Cross-Site Scripting (1.5.8.6)

WordPress Plugin Product Filter for WooCommerce Security Bypass (8.1.1)

OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-8176)

Lighttpd Other Vulnerability (CVE-2007-3949)

Severity

Critical

Classification

CVE-2016-0705 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities