CVE-2003-0545

CRITICAL 9.8CVE-2003-0545 · Published 17/11/2003 · updated 16/06/2026

Package	Affected versions	Patched versions
openssl openssl	`= 0.9.6= 0.9.7`	No fix yet

Description

Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding.

References

secunia.com/advisories/22249 · Broken Link
www-1.ibm.com/support/docview.wss · Broken Link
cert.org/advisories/CA-2003-26.html · Third Party Advisory
debian.org/security/2003/dsa-394 · Broken Link
kb.cert.org/vuls/id/935264 · Third Party Advisory
redhat.com/support/errata/RHSA-2003-292.html · Broken Link
securityfocus.com/bid/8732 · Broken Link
uniras.gov.uk/vuls/2003/006489/openssl.htm · Broken Link
vupen.com/english/advisories/2006/3900 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2590 · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free