CVE-2012-0027
Description
The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
- CVSS Version 2.0
nvd
CVE ID: CVE-2012-0027
Base Score: 5.0
Base Severity: MEDIUM
Vector String:AV:N/AC:L/Au:N/C:N/I:N/A:P
Refrence: NVD