CVE-2003-0544: OpenSSL

Medium severity, CVSS 5.0. EPSS: 6.9% chance of exploitation in the next 30 days.

OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL client certificate that causes OpenSSL to read past the end of a buffer when the long form is used.

Affected products

• OpenSSL OpenSSL: version 0.9.6 only; version 0.9.7 only

Published 2003-11-17. Last modified 2026-06-16.