Description
crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2014-0448 Vulnerability (CVE-2014-0448)
Oracle JRE CVE-2018-2627 Vulnerability (CVE-2018-2627)
Joomla! Core 3.x.x SQL Injection (3.5.0 - 3.8.5)
WordPress Plugin WatchMan-Site7 Cross-Site Request Forgery (3.0.2)
WordPress Plugin Booking calendar, Appointment Booking System Multiple Vulnerabilities (2.1.7)