VDB

GCVE-110-CERTCC-2003-686224

GCVE-110-CERTCC-2003-686224
Advisory Published
Vulnetix · Advisory published September 30, 2003
A vulnerability in the way OpenSSL handles invalid public keys in client certificate messages could allow a remote attacker to cause a denial of service. This vulnerability requires as a precondition that an application is configured to ignore public key decoding errors, which is typically only the case during debugging.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact5population2exploitation0widely_known15score_current1.5ease_of_exploitation16

References

OpenSSL does not securely handle invalid public key when configured to ignore errors
url
OpenSSL does not securely handle invalid public key when configured to ignore errors
url
OpenSSL does not securely handle invalid public key when configured to ignore errors
url
OpenSSL does not securely handle invalid public key when configured to ignore errors
url
OpenSSL does not securely handle invalid public key when configured to ignore errors
url
OpenSSL does not securely handle invalid public key when configured to ignore errors
advisory
OpenSSL does not securely handle invalid public key when configured to ignore errors
advisory

Browse GCVE Records

73,834 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›