Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remo

Summary

Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.

Timeline

1. Aug 5, 2005, 4:00 AM UTCCVE published
2. Aug 7, 2024, 9:44 PM UTCRecord last updated

Affected versions

• n/a n/a

  Version range not reported

References 24