CVE-2002-0659

Description

The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.

How to fix CVE-2002-0659

To remediate CVE-2002-0659, upgrade the affected package to a fixed version below.

• Debian/openssl—upgrade to 0.9.6e-1 or later

Is CVE-2002-0659 being exploited?

Moderate — EPSS is 7.9%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (1)

• from 0, < 0.9.6e-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2002-0659