CVE-2024-4603
LowSummary
Checking excessively long DSA keys or parameters may be very slow. Applications using EVP_PKEY_param_check() or EVP_PKEY_public_check() to verify DSA public keys or parameters may experience long delays.
Risk Assessment
An attacker can supply specially crafted long DSA keys or parameters, causing significant slowdowns in applications, potentially leading to denial of service (DoS).
Recommendation
Update OpenSSL to a patched version. Consider limiting the size of accepted DSA keys.
Original NVD description (English source)
Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the functions EVP_PKEY_param_check() or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may experience long delays. Where the key or parameters that are being