| Package | Affected versions | Patched versions |
|---|---|---|
| openssl | = 0.9.6= 0.9.7 |
OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free