CVE-2012-0027

The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial…

published January 6, 2012

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04812 · 91.9th percentile
Published
2012-01-06T01:00Z
EPSS history
Timeline
  • 06 JAN 01:00Z
    The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial…
    cvelistv5