CVE-2002-20001

The record

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.

Affected packages

Related vulnerabilities

• CVE-2024-4741 Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be… Also affects openssl-1_1
• CVE-2024-2511 Issue summary: Some non-default TLS server configurations can cause unbounded memory… Also affects openssl-1_1
• CVE-2021-3449 An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello… Also affects openssl-1_1
• CVE-2021-3450 The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates… Also affects openssl-1_1
• CVE-2020-1967 Server or client applications that call the SSL_check_chain() function during or after a… Also affects openssl-1_1
• CVE-2019-1551 There is an overflow bug in the x64_64 Montgomery squaring procedure used in… Also affects openssl-1_1
• CVE-2019-1547 Normally in OpenSSL EC groups always have a co-factor present and this is used in side… Also affects openssl-1_1
• CVE-2017-3738 There is an overflow bug in the AVX2 Montgomery multiplication procedure used in… Also affects openssl-1_1