Xyssl

xyssl

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-7129 1Xyssl 1Xyssl Apr 23, 2026 Aug 31, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 XySSL before 0.9 allows remote attackers to cause a denial of service (infinite loop) via an X.509 certificate that does not pass the RSA signature check during verification.
CVE-2008-7128 1Xyssl 1Xyssl Apr 23, 2026 Aug 31, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 The ssl_parse_client_key_exchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors.