Description
The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
Remediation
References
Related Vulnerabilities
WordPress Plugin TRADIES Information Disclosure (2.2.6)
WordPress Plugin Invit0r 'ofc_upload_image.php' Arbitrary File Upload (0.22)
WordPress Plugin Sexy Add Template Cross-Site Request Forgery (1.0)
WordPress 4.4.x Cross-Site Scripting Vulnerability (4.4 - 4.4.2)
Jboss EAP Improper Input Validation Vulnerability (CVE-2010-1871)