PT-2009-2598 · Xyssl · Xyssl

Published 2009-08-31 · Updated 2017-08-17 · CVE-2008-7129

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions XySSL versions prior to 0.9

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This occurs when an X.509 certificate fails the RSA signature check during verification.

Recommendations For versions prior to 0.9, update to version 0.9 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-7129

Affected Products

Xyssl

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-7129 · Security Note
• http://vupen.com/english/advisories/2008/0917 · Vendor Advisory
• http://osvdb.org/49101 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41255 · Note
• http://polarssl.org/?archive#001c · Note