Description

OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification.

Remediation

References

CVE-2006-2940

Related Vulnerabilities

MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-9416)

WordPress Plugin WP Flow Plus Unspecified Vulnerability (2.2.0)

Drupal CVE-2007-0626 Vulnerability (CVE-2007-0626)

e107 Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-2099)

Oracle Database Server CVE-2011-0811 Vulnerability (CVE-2011-0811)

Severity

High

Classification

CVE-2006-2940

Tags

Missing Update Known Vulnerabilities