Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3550
HistoryFeb 10, 2017 - 2:08 a.m.

Denial Of Service (DoS)

2017-02-1002:08:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
28

0.099 Low

EPSS

Percentile

94.9%

OpenSSL is vulnerable to denial of service. The vulnerability exists in the d2i_ECPrivateKey function due to a use-after-free which allows an attacker to crash the application via a malformed Elliptic Curve private-key file.

References