Description
The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation.
Remediation
References
Related Vulnerabilities
WordPress Plugin FancyBox for WordPress Security Bypass (3.0.2)
WordPress CVE-2008-6767 Vulnerability (CVE-2008-6767)
Liferay Portal CVE-2020-15840 Vulnerability (CVE-2020-15840)
WordPress Plugin XO Security Cross-Site Scripting (1.5.2)
WordPress Plugin DVS Custom Notification Multiple Cross-Site Request Forgery Vulnerabilities (1.0.1)