Description

The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.

Remediation

References

CVE-2012-0027

Related Vulnerabilities

WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.14)

PHP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-10546)

Drupal Core 4.6.x Multiple Vulnerabilities (4.6.0 - 4.6.3)

Oracle Database Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-5507)

WordPress Plugin Advanced Custom Fields (ACF) Security Bypass (5.9.9)

Severity

Medium

Classification

CVE-2012-0027

Tags

Missing Update Known Vulnerabilities