Xyssl

Xyssl

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.52%
  • Published 31.08.2009 10:30:01
  • Last modified 09.04.2025 00:30:58

The ssl_parse_client_key_exchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors.

  • EPSS 0.33%
  • Published 31.08.2009 10:30:01
  • Last modified 09.04.2025 00:30:58

XySSL before 0.9 allows remote attackers to cause a denial of service (infinite loop) via an X.509 certificate that does not pass the RSA signature check during verification.