Description

OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.

Remediation

References

CVE-2013-0166

Related Vulnerabilities

WordPress Plugin AccessPress Social Icons Multiple SQL Injection Vulnerabilities (1.6.6)

WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.4)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33938)

Moodle Other Vulnerability (CVE-2005-2247)

Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.4)

Severity

Medium

Classification

CVE-2013-0166

Tags

Missing Update Known Vulnerabilities