Vulnerabilities > Xyssl
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-08-31 | CVE-2008-7129 | Resource Management Errors vulnerability in Xyssl XySSL before 0.9 allows remote attackers to cause a denial of service (infinite loop) via an X.509 certificate that does not pass the RSA signature check during verification. | 5.0 |
| 2009-08-31 | CVE-2008-7128 | Permissions, Privileges, and Access Controls vulnerability in Xyssl The ssl_parse_client_key_exchange function in XySSL before 0.9 does not protect against certain Bleichenbacher attacks using chosen ciphertext, which allows remote attackers to recover keys via unspecified vectors. | 7.5 |