The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2012-01-05 17:55
Updated : 2016-08-22 19:04
NVD link : CVE-2011-4619
Mitre link : CVE-2011-4619
JSON object : View
CWE
CWE-399
Resource Management Errors
Products Affected
openssl
- openssl