Asymmetric denial of service In openssl
Description
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.4 | 1.0.2h-r0 | ||
alpine v3.2 | 1.0.2h-r0 | ||
alpine v3.6 | 1.0.2h-r0 | ||
alpine v3.7 | 1.0.2h-r0 | ||
 debian 12 | 1.0.2h-1 | ||
alpine v3.5 | 1.0.2h-r0 | ||
alpine v3.8 | 1.0.2h-r0 | ||
debian 14 | 1.0.2h-1 | ||
alpine v3.3 | 1.0.2h-r0 | ||
debian 13 | 1.0.2h-1 |
1-10 of 17
10
Aliases
1. 2. 3. 4. 5. 6. 7.