CVE-2003-0543
Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service ...
Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.
- Record
CVE-2003-0543- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.
- Record
CVE-2003-0543- Updated
- 2026-11-02
EUVDEUVD-2003-0537 No score
Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.
- Record
EUVD-2003-0537- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v3q3-83mw-m54r No score
Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service ...
Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.
- Record
GHSA-v3q3-83mw-m54r- Updated
- 2026-11-02
OSV No score
Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.
- Record
CVE-2003-0543- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0543 No score
Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.
- Record
DEBIAN-CVE-2003-0543- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslDebian:12 |
before 0.9.7c | 0.9.7c |
opensslDebian:13 |
before 0.9.7c | 0.9.7c |
opensslDebian:14 |
before 0.9.7c | 0.9.7c |
opensslDebian:3.0 From an advisory covering 3 CVEs |
before 0.9.6c-2.woody.4 | 0.9.6c-2.woody.4 |
openssl095Debian:3.0 From an advisory covering 3 CVEs |
before 0.9.5a-6.woody.3 | 0.9.5a-6.woody.3 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | OpenSSL ASN.1 < 0.9.6j/0.9.7b - Brute Forcer for Parsing Bugs | 2003-10-09 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0543 is a medium vulnerability (CVSS 5.0) in Openssl, published October 1, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 27.4%, the 98th percentile. Fixed in openssl 0.9.7c.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5292
redhat.com/support/errata/RHSA-2003-292.html
kb.cert.org/vuls/id/255484
vupen.com/english/advisories/2006/3900
debian.org/security/2003/dsa-393
www-1.ibm.com/support/docview.wss?uid=swg21247112
Show 13 moreShow less
uniras.gov.uk/vuls/2003/006489/openssl.htm
cert.org/advisories/CA-2003-26.html
secunia.com/advisories/22249
securityfocus.com/bid/8732
sunsolve.sun.com/search/document.do?assetkey=1-66-201029-1
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=104893
linuxsecurity.com/advisories/engarde_advisory-3693.html
nvd.nist.gov/vuln/detail/CVE-2003-0543
github.com/advisories/GHSA-v3q3-83mw-m54r
security-tracker.debian.org/tracker/CVE-2003-0543