Description
The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Remediation
References
Related Vulnerabilities
Serendipity Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-5475)
WordPress Plugin Photoswipe Masonry Gallery Cross-Site Scripting (1.2.14)
WordPress 6.5 Cross-Site Scripting (6.5)
WordPress Plugin WordPress fancyBox Lightbox Cross-Site Scripting (1.0.1)
Oracle Application Server Other Vulnerability (CVE-2006-3708)