Title

OpenSSL Denial of Service Vulnerability (Cat I impact)

Discussion

OpenSSL has released a security advisory addressing a vulnerability in supported OpenSSL versions. OpenSSL is an open-source implementation of SSL and TLS protocols used to encrypt transmission of data between web browsers and web servers. OpenSSL is designed to enable secure communications over an insecure network such as the Internet. To exploit this vulnerability, an attacker would submit a malicious request to an affected system. If successfully exploited, this vulnerability would allow an attacker to cause a denial-of-service condition.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-73947

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.