A denial of service (DoS) vulnerability exists in the lasso_provider_verify_saml_signature function of Entr'ouvert Lasso version 2.5.1. An attacker can send a specially crafted malformed SAML response to trigger this vulnerability, causing the service to become unavailable.