7.8

CVE-2006-2940

OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification.

Data is provided by the National Vulnerability Database (NVD)
OpenSSL ≫ OpenSSL Version0.9.1c
OpenSSL ≫ OpenSSL Version0.9.2b
OpenSSL ≫ OpenSSL Version0.9.3
OpenSSL ≫ OpenSSL Version0.9.3a
OpenSSL ≫ OpenSSL Version0.9.4
OpenSSL ≫ OpenSSL Version0.9.5
OpenSSL ≫ OpenSSL Version0.9.5 Updatebeta1
OpenSSL ≫ OpenSSL Version0.9.5 Updatebeta2
OpenSSL ≫ OpenSSL Version0.9.5a
OpenSSL ≫ OpenSSL Version0.9.5a Updatebeta1
OpenSSL ≫ OpenSSL Version0.9.5a Updatebeta2
OpenSSL ≫ OpenSSL Version0.9.6
OpenSSL ≫ OpenSSL Version0.9.6 Updatebeta1
OpenSSL ≫ OpenSSL Version0.9.6 Updatebeta2
OpenSSL ≫ OpenSSL Version0.9.6 Updatebeta3
OpenSSL ≫ OpenSSL Version0.9.6a
OpenSSL ≫ OpenSSL Version0.9.6a Updatebeta1
OpenSSL ≫ OpenSSL Version0.9.6a Updatebeta2
OpenSSL ≫ OpenSSL Version0.9.6a Updatebeta3
OpenSSL ≫ OpenSSL Version0.9.6b
OpenSSL ≫ OpenSSL Version0.9.6c
OpenSSL ≫ OpenSSL Version0.9.6d
OpenSSL ≫ OpenSSL Version0.9.6e
OpenSSL ≫ OpenSSL Version0.9.6f
OpenSSL ≫ OpenSSL Version0.9.6g
OpenSSL ≫ OpenSSL Version0.9.6h
OpenSSL ≫ OpenSSL Version0.9.6i
OpenSSL ≫ OpenSSL Version0.9.6j
OpenSSL ≫ OpenSSL Version0.9.6k
OpenSSL ≫ OpenSSL Version0.9.6l
OpenSSL ≫ OpenSSL Version0.9.6m
OpenSSL ≫ OpenSSL Version0.9.7
OpenSSL ≫ OpenSSL Version0.9.7a
OpenSSL ≫ OpenSSL Version0.9.7b
OpenSSL ≫ OpenSSL Version0.9.7c
OpenSSL ≫ OpenSSL Version0.9.7d
OpenSSL ≫ OpenSSL Version0.9.7e
OpenSSL ≫ OpenSSL Version0.9.7f
OpenSSL ≫ OpenSSL Version0.9.7g
OpenSSL ≫ OpenSSL Version0.9.7h
OpenSSL ≫ OpenSSL Version0.9.7i
OpenSSL ≫ OpenSSL Version0.9.7j
OpenSSL ≫ OpenSSL Version0.9.7k
OpenSSL ≫ OpenSSL Version0.9.8
OpenSSL ≫ OpenSSL Version0.9.8a
OpenSSL ≫ OpenSSL Version0.9.8b
OpenSSL ≫ OpenSSL Version0.9.8c
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 16.49% 0.947
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C