9.1Crítica
Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass
Red Hat Red Hat Enterprise Linux 3; Red Hat Red Hat Enterprise Linux 4; Red Hat Red Hat Network Satellite Server v 4.2; Red Hat Red Hat Network Satellite Server v 4.2 (RHEL3)
A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.5…
3.9%EPSS