CVE-2003-0544
OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs,...
OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.
Exploit likelihood
What each source reports
NVD Score used
OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.
- Record
CVE-2003-0544- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.
- Record
CVE-2003-0544- Updated
- 2026-11-02
EUVDEUVD-2003-0538 No score
OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.
- Record
EUVD-2003-0538- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4352-7f73-983c No score
OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs,...
OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.
- Record
GHSA-4352-7f73-983c- Updated
- 2026-11-02
OSV No score
OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.
- Record
CVE-2003-0544- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0544 No score
OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.
- Record
DEBIAN-CVE-2003-0544- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslDebian:12 |
before 0.9.7c | 0.9.7c |
opensslDebian:13 |
before 0.9.7c | 0.9.7c |
opensslDebian:14 |
before 0.9.7c | 0.9.7c |
opensslDebian:3.0 From an advisory covering 3 CVEs |
before 0.9.6c-2.woody.4 | 0.9.6c-2.woody.4 |
openssl095Debian:3.0 From an advisory covering 3 CVEs |
before 0.9.5a-6.woody.3 | 0.9.5a-6.woody.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0544 is a medium vulnerability (CVSS 5.0) in Openssl, published October 1, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.92%, the 94th percentile. Fixed in openssl 0.9.7c.
References
redhat.com/support/errata/RHSA-2003-292.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4574
kb.cert.org/vuls/id/380864
exchange.xforce.ibmcloud.com/vulnerabilities/43041
vupen.com/english/advisories/2006/3900
debian.org/security/2003/dsa-393
Show 13 moreShow less
www-1.ibm.com/support/docview.wss?uid=swg21247112
uniras.gov.uk/vuls/2003/006489/openssl.htm
cert.org/advisories/CA-2003-26.html
secunia.com/advisories/22249
securityfocus.com/bid/8732
sunsolve.sun.com/search/document.do?assetkey=1-66-201029-1
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=104893
linuxsecurity.com/advisories/engarde_advisory-3693.html
nvd.nist.gov/vuln/detail/CVE-2003-0544
github.com/advisories/GHSA-4352-7f73-983c
security-tracker.debian.org/tracker/CVE-2003-0544