CVE-2003-0544 — MEDIUM severity vulnerability (OpenSSL 0.9.6 and 0.9.7 does not properly track the number o)
OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.
| CVE ID | CVE-2003-0544 |
|---|---|
| Severity | MEDIUM |
| CVSS score | 5.0 |
| CVSS vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
| CWE | NVD-CWE-Other |
| Status | Modified |
| Published | 2003-11-17 |
| Last modified | 2026-04-16 |
| Description | OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used. |
| Source | NIST National Vulnerability Database |
🔍 Search all vulnerabilities →
$999/mo
Try CVECheck →