AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2006-2940

HIGH · CVSS 7.8 EPSS 4.86%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-09-28 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2006-2940
Severity
HIGH
CVSS
7.8
EPSS
4.86%
OpenSSL

Original Filing — NVD Description

OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification.