Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSL‘BN_GF2m_mod_inv’函数资源管理错误漏洞
Vulnerability Description
OpenSSL是OpenSSL团队开发的一个开源的能够实现安全套接层（SSL v2/v3）和安全传输层（TLS v1）协议的通用加密库，它支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。 OpenSSL的crypto/bn/bn_gf2m.c文件中的‘BN_GF2m_mod_inv’函数存在安全漏洞，该漏洞源于程序没有正确处理ECParameters结构体。远程攻击者可借助使用Elliptic Curve算法的会话利用该漏洞造成拒绝服务（无限循环）。以下版本受到影响：OpenSSL 0.9.8s
CVSS Information
N/A
Vulnerability Type
N/A