Description
OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certificate, as demonstrated by an RSA public key.
Remediation
References
Related Vulnerabilities
FluxBB Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2020-28873)
Atlassian Confluence CVE-2020-29448 Vulnerability (CVE-2020-29448)
Drupal Improper Input Validation Vulnerability (CVE-2022-24775)
PHP Other Vulnerability (CVE-2014-4698)
WordPress Plugin Fungif The Awesome GIFs Cross-Site Scripting (2.0)