Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openssl openssl 0.9.7m vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2008-7270
OpenSSL prior to 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote malicious users to force the use of a disabled cipher via vectors involving sniffing network traffic to dis...
Openssl Openssl 0.9.4Openssl Openssl 0.9.5Openssl Openssl 0.9.6Openssl Openssl 0.9.6eOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.6jOpenssl Openssl 0.9.6mOpenssl Openssl 0.9.7aOpenssl Openssl 0.9.7Openssl Openssl 0.9.7iOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.7mOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.5aOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.6hOpenssl Openssl 0.9.2bOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.8a
5.8
CVSSv2
CVE-2011-4354
crypto/bn/bn_nist.c in OpenSSL prior to 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving ECDH or ECDHE cipher suites, uses an incorrect modular reduction algorithm in its implementation of the P-256 and P-384 NIST elliptic curv...
Openssl Openssl 0.9.8Openssl Openssl 0.9.8aOpenssl Openssl 0.9.2bOpenssl Openssl 0.9.3Openssl Openssl 0.9.5aOpenssl Openssl 0.9.6Openssl Openssl 0.9.6gOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.6kOpenssl Openssl 0.9.7Openssl Openssl 0.9.7mOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.3aOpenssl Openssl 0.9.4Openssl Openssl 0.9.6aOpenssl Openssl 0.9.6fOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.5
5
CVSSv2
CVE-2009-0789
OpenSSL prior to 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote malicious users to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certi...
Openssl Openssl 0.9.8hOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8Openssl Openssl 0.9.7lOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7Openssl Openssl 0.9.6eOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.5aOpenssl Openssl 0.9.2bOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.7mOpenssl Openssl 0.9.7kOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.6kOpenssl Openssl 0.9.6j
5
CVSSv2
CVE-2006-7250
The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and previous versions allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.
Openssl OpensslOpenssl Openssl 0.9.7Openssl Openssl 0.9.5aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.8mOpenssl Openssl 0.9.3Openssl Openssl 0.9.8cOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.5Openssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.6Openssl Openssl 0.9.7jOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.4Openssl Openssl 0.9.8gOpenssl Openssl 0.9.8k
7.5
CVSSv2
CVE-2010-4252
OpenSSL prior to 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote malicious users to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each ro...
Openssl Openssl 0.9.7Openssl Openssl 0.9.5aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.8mOpenssl Openssl 0.9.3Openssl Openssl 0.9.8cOpenssl Openssl 0.9.7cOpenssl Openssl 1.0.0Openssl Openssl 0.9.5Openssl Openssl 0.9.8nOpenssl OpensslOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.6Openssl Openssl 0.9.7jOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.4Openssl Openssl 0.9.8g
7.5
CVSSv2
CVE-2010-0742
The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL prior to 0.9.8o and 1.x prior to 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent malicious users to modify invalid memory locations or ...
Openssl Openssl 0.9.5aOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.6hOpenssl Openssl 0.9.7Openssl Openssl 0.9.1cOpenssl Openssl 0.9.8lOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.7iOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.5Openssl Openssl 0.9.6Openssl Openssl 0.9.6gOpenssl Openssl 0.9.6fOpenssl Openssl 0.9.3Openssl Openssl 0.9.2bOpenssl Openssl 0.9.7aOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.7k
5
CVSSv2
CVE-2009-4355
Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and previous versions and 1.0.0 Beta through Beta 4 allows remote malicious users to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cl...
Openssl OpensslOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8dOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7eRedhat Openssl 0.9.7a-2Openssl Openssl 0.9.8fOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.7Openssl Openssl 0.9.7fOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.6Openssl Openssl 0.9.6cOpenssl Openssl 0.9.6bOpenssl Openssl 0.9.5Openssl Openssl 0.9.5aOpenssl Openssl 0.9.2bOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.8hOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.7a
5
CVSSv2
CVE-2012-0027
The GOST ENGINE in OpenSSL prior to 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote malicious users to cause a denial of service (daemon crash) via crafted data from a TLS client.
Openssl Openssl 1.0.0Openssl Openssl 0.9.8nOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0bOpenssl Openssl 0.9.8sOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8hOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.7iOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.7Openssl Openssl 0.9.6mOpenssl Openssl 0.9.6gOpenssl Openssl 0.9.6fOpenssl Openssl 0.9.5Openssl Openssl 0.9.4Openssl Openssl 1.0.0aOpenssl Openssl 0.9.8rOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8f
5
CVSSv2
CVE-2011-4576
The SSL 3.0 implementation in OpenSSL prior to 0.9.8s and 1.x prior to 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote malicious users to obtain sensitive information by decrypting the padding data sent by an SSL peer.
Openssl OpensslOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.6mOpenssl Openssl 0.9.6lOpenssl Openssl 0.9.6fOpenssl Openssl 0.9.6eOpenssl Openssl 0.9.4Openssl Openssl 0.9.2bOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8oOpenssl Openssl 0.9.8hOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8Openssl Openssl 0.9.7mOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.7d
4.3
CVSSv2
CVE-2011-4577
OpenSSL prior to 0.9.8s and 1.x prior to 1.0.0f, when RFC 3779 support is enabled, allows remote malicious users to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous...
Openssl Openssl 0.9.8mOpenssl Openssl 0.9.8lOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8dOpenssl Openssl 0.9.7kOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.7aOpenssl Openssl 0.9.6hOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6Openssl OpensslOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8hOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.8Openssl Openssl 0.9.7gOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.6lOpenssl Openssl 0.9.6k
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook