Description

OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.

Remediation

References

CVE-2006-2937

Related Vulnerabilities

Moodle Use of GET Request Method With Sensitive Query Strings Vulnerability (CVE-2025-3637)

Claroline Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-3262)

WordPress Plugin Opal Estate Cross-Site Request Forgery (1.6.11)

Jetty Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-5047)

TYPO3 Exposed Dangerous Method or Function Vulnerability (CVE-2024-55920)

Severity

High

Classification

CVE-2006-2937

Tags

Missing Update Known Vulnerabilities