Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSL整数下溢漏洞
Vulnerability Description
OpenSSL是OpenSSL团队开发的一个开源的能够实现安全套接层（SSL v2/v3）和安全传输层（TLS v1）协议的通用加密库，它支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。 OpenSSL 0.9.8x之前版本，1.0.0j之前的1.0.0版本以及1.0.1c之前的1.0.1版本中存在整数下溢漏洞，该漏洞源于TLS 1.1版本、TLS 1.2版本或者DTLS用于CBC加密。远程攻击者可利用该漏洞借助在某些明确IV计算过程中未正确处理的特制TLS数据包导致拒绝服务（缓冲区越界读取），
CVSS Information
N/A
Vulnerability Type
N/A