Lucene search

K
cvelistMitreCVELIST:CVE-2009-0129
HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-0129

2022-10-0316:24:12
mitre
www.cve.org
1
libcrypt-openssl-dsa-perl
certificate validation
vulnerability
openssl
remote attackers
ssl/tls signature

7.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify and DSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.