Description
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
Remediation
References
Related Vulnerabilities
Moodle Other Vulnerability (CVE-2012-3398)
Nexus Repository Manager Server-Side Request Forgery (SSRF) Vulnerability (CVE-2022-27907)
Drupal Core 7.x Cross-Site Scripting (7.0 - 7.64)
WordPress Plugin Post to Twitter Cross-Site Request Forgery (0.7)
PrestaShop Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-25170)