CVE-2003-0543 Integer overflow in n/a
Remote attackers can crash OpenSSL via crafted SSL client certificates due to an integer overflow in ASN.1 parsing.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2003-0543?
CVE-2003-0543 is a medium-severity vulnerability in Openssl Openssl, published on 1 Oct 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.
Which versions are affected by CVE-2003-0543?
It affects 1 product.
Products include Openssl Openssl.
How do I fix CVE-2003-0543?
Upgrade to a fixed version.
Is CVE-2003-0543 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2003-0543 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Openssl Openssl
Sources
Also known as DEBIAN-CVE-2003-0543, GHSA-v3q3-83mw-m54r.