Description

The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.

Remediation

References

CVE-2015-0288

Related Vulnerabilities

WordPress Plugin wptf-image-gallery Arbitrary File Download (1.0.3)

LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-17660)

IBMHttpServer Other Vulnerability (CVE-2004-0492)

WordPress Plugin WP Rss Poster SQL Injection (1.0.0)

Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-2355)

Severity

Medium

Classification

CVE-2015-0288

Tags

Missing Update Known Vulnerabilities