CVE:CVE-2012-1558
CNNVD:CNNVD-201203-212
yaSSL是用于实现SSL的开源软件包。
yaSSL CyaSSL 2.0.8之前版本中存在漏洞。远程攻击者可利用该漏洞借助特制X.509证书，导致拒绝服务（空指针解引用和应用程序崩溃）。
solution:Upgrade yassl cyassl to a higher version than 2.0.6,0.2.0,0.3.0,0.4.0,0.5.0,0.5.5,0.6.0,0.6.2,0.6.3,0.8.0,0.9.0,0.9.6,0.9.8,0.9.9,1.0.0:rc1,1.0.0:rc2,1.0.0:rc3,1.0.2,1.0.3,1.0.6,1.1.0,1.2.0,1.3.0,1.4.0,1.5.0,1.5.4,1.5.6,1.6.0,1.6.5,1.8.0,1.9.0,2.0.0:rc1,2.0.0:rc2,2.0.0:rc3,2.0.2,and avoid the version (,2.0.6],0.2.0,0.3.0,0.4.0,0.5.0,0.5.5,0.6.0,0.6.2,0.6.3,0.8.0,0.9.0,0.9.6,0.9.8,0.9.9,1.0.0:rc1,1.0.0:rc2,1.0.0:rc3,1.0.2,1.0.3,1.0.6,1.1.0,1.2.0,1.3.0,1.4.0,1.5.0,1.5.4,1.5.6,1.6.0,1.6.5,1.8.0,1.9.0,2.0.0:rc1,2.0.0:rc2,2.0.0:rc3,2.0.2