Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3339
HistoryJan 26, 2017 - 6:43 a.m.

Denial Of Service (DoS)

2017-01-2606:43:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
27

EPSS

0.477

Percentile

97.5%

OpenSSL is vulnerable to denial of service attacks. The attacks are due to a flaw in the way OpenSSL does the SSLv2 handshake messages. Therefore, when it has SSLv2 and EXPORT-grade cipher suites enabled, attackers can send malicious SSLv2 CLIENT-MASTER-Key messages to cause server failures.

References