CVE-2012-0027

openssl: invalid GOST parameters DoS attack

Published Jan 6, 2012 CVSS 2.0 · 5.0 Medium EPSS 4.8% KEV · Not listed
Description
The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-0067 The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
Ubuntu USN Ubuntu USN USN-1357-1 OpenSSL vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 6:09 PM
Reserved
Dec 7, 2011, 12:00 AM
Status
Modified
Published
Jan 6, 2012, 1:55 AM
Modified
Jun 16, 2026, 11:36 PM
Severity
Moderate
Public date
Jan 4, 2012, 12:00 AM