Summary
Applications that use the functions EVP_PKEY_param_check() or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source, this may lead to a denial of service.
Products not listed in the Impact Details section have not been evaluated. Furthermore, products that have exceeded any software maintenance time periods are also not evaluated and will not be published. Please consult End of Sale and End of Service Life - Extreme Networks for the EOL notices related to the product under question.
Impact Details
OS/Product |
Exposure |
Network OS (VDX) |
No |
|
Repair Recommendations
None
Please see the full Security Advisory article here for more details and updates.