897b34d36d
OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (inifnite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition. http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2940 OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via certain public keys that require extra time to process. http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3738 Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers. http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4343 Unspecified vulnerability in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors. |
||
---|---|---|
.. | ||
dist | ||
Makefile.openssl | ||
TODO |