p PatchFirst

CVE-2003-0545

CVE-2003-0545

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 encoding.

CVSS 9.8 · Critical · EPSS 87.5% · Fix available

Published
Updated

Stack: system · network

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • openssl Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.9.7c

    Update to 0.9.7c

  • openssl Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.9.7c

    Update to 0.9.7c

  • openssl Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.9.7c

    Update to 0.9.7c

Original sources

Check your server →