Lucene search

K
prionPRIOn knowledge basePRION:CVE-2009-0124
HistoryJan 15, 2009 - 5:30 p.m.

Input validation

2009-01-1517:30:00
PRIOn knowledge base
www.prio-n.com
9

6.4 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

81.0%

The tqsl_verifyDataBlock function in openssl_cert.cpp in American Radio Relay League (ARRL) tqsllib 2.0 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.

CPENameOperatorVersion
tqsllibeq2.0