Security Advisory

CVE-2015-3194

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-12-06 00:00:00

Last updated 2024-08-06 05:39:31

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.

← Browse all CVEs View on cve.org ↗