Security Advisory
CVE-2015-3194
7.5
HIGH
Vulnerability Description
crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.
Published Date
December 6, 2015
Official Source
NIST NVD Advisory