Summary
generated automatically from NVD dataCVE-2003-0851 is a flaw in OpenSSL 0.9.6k, and the affected-products list also names several Cisco products, including IOS, PIX Firewall and the CSS11000 Content Services Switch. A remote attacker can send malformed ASN.1 sequences that trigger excessive recursion, which crashes the process and causes a denial of service. The CVSS v2.0 score is 5.0 (MEDIUM), with network access, low complexity, no authentication and an availability-only impact.
NVD description
OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.
EPSS · FIRST.org
6.1%probability of exploitation in the next 30 days
Higher than 93% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-11-01, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 1 déc. 2003
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.
Weaknesses (CWE)
References (24)
- http://www.kb.cert.org/vuls/id/412478PatchThird Party AdvisoryUS Government Resource
- http://www.openssl.org/news/secadv_20031104.txtPatchVendor Advisory
- http://www.securityfocus.com/bid/8970PatchVendor Advisory
- + 9 more references on NVD
Similar CVEs
Other vulnerabilities of type
Running OpenSSL? Know which CVEs hit your version.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.