Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openssl openssl 0.9.8e vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2
CVE-2007-4995
Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 prior to 0.9.8f allows remote malicious users to execute arbitrary code via unspecified vectors.
Openssl Openssl 0.9.8dOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.8Openssl Openssl 0.9.8a
10
CVSSv2
CVE-2009-3245
OpenSSL prior to 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
Openssl Openssl 0.9.8jOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.8Openssl Openssl 0.9.8eOpenssl Openssl 0.9.8dOpenssl OpensslOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8hOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8f
4.3
CVSSv2
CVE-2010-0433
The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL prior to 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote malicious users to cause a denial of service (NULL pointer derefe...
Openssl Openssl 0.9.8bOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.8eOpenssl OpensslOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8dOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.8lOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.8Openssl Openssl 0.9.8iOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.8h
9.3
CVSSv2
CVE-2011-4109
Double free vulnerability in OpenSSL 0.9.8 prior to 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote malicious users to have an unspecified impact by triggering failure of a policy check.
Openssl Openssl 0.9.8rOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.8nOpenssl Openssl 0.9.8mOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8lOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8dOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8oOpenssl Openssl 0.9.8hOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8
6.8
CVSSv2
CVE-2007-5135
Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote malicious users to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result ...
Openssl Openssl 0.9.7Openssl Openssl 0.9.7gOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.8dOpenssl Openssl 0.9.7aOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.7iOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7kOpenssl Openssl 0.9.8Openssl Openssl 0.9.8f
5
CVSSv2
CVE-2011-3210
The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 up to and including 0.9.8r and 1.0.x prior to 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote malicious users to cause a denial of service (daemon crash) v...
Openssl Openssl 0.9.8pOpenssl Openssl 0.9.8nOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.8mOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.8sOpenssl Openssl 0.9.8oOpenssl Openssl 0.9.8Openssl Openssl 0.9.8dOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.8lOpenssl Openssl 0.9.8rOpenssl Openssl 0.9.8hOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8kOpenssl Openssl 1.0.0Openssl Openssl 1.0.0d
4.3
CVSSv2
CVE-2008-7270
OpenSSL prior to 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote malicious users to force the use of a disabled cipher via vectors involving sniffing network traffic to dis...
Openssl Openssl 0.9.4Openssl Openssl 0.9.5Openssl Openssl 0.9.6Openssl Openssl 0.9.6eOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.6jOpenssl Openssl 0.9.6mOpenssl Openssl 0.9.7aOpenssl Openssl 0.9.7Openssl Openssl 0.9.7iOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.7mOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.5aOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.6hOpenssl Openssl 0.9.2bOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.8a
5.8
CVSSv2
CVE-2011-4354
crypto/bn/bn_nist.c in OpenSSL prior to 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving ECDH or ECDHE cipher suites, uses an incorrect modular reduction algorithm in its implementation of the P-256 and P-384 NIST elliptic curv...
Openssl Openssl 0.9.8Openssl Openssl 0.9.8aOpenssl Openssl 0.9.2bOpenssl Openssl 0.9.3Openssl Openssl 0.9.5aOpenssl Openssl 0.9.6Openssl Openssl 0.9.6gOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.6kOpenssl Openssl 0.9.7Openssl Openssl 0.9.7mOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.3aOpenssl Openssl 0.9.4Openssl Openssl 0.9.6aOpenssl Openssl 0.9.6fOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.5
5.8
CVSSv2
CVE-2008-5077
OpenSSL 0.9.8i and previous versions does not properly check the return value from the EVP_VerifyFinal function, which allows remote malicious users to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
Openssl Openssl 0.9.8eOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.7kOpenssl Openssl 0.9.7aOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.7Openssl Openssl 0.9.8bOpenssl Openssl 0.9.8dOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.6mOpenssl Openssl 0.9.6lOpenssl Openssl 0.9.6eOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6Openssl Openssl 0.9.3aOpenssl Openssl 0.9.4Openssl Openssl 0.9.7lOpenssl Openssl 0.9.8
5
CVSSv2
CVE-2009-0789
OpenSSL prior to 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote malicious users to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certi...
Openssl Openssl 0.9.8hOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8Openssl Openssl 0.9.7lOpenssl Openssl 0.9.7fOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7Openssl Openssl 0.9.6eOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.5aOpenssl Openssl 0.9.2bOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.7mOpenssl Openssl 0.9.7kOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7bOpenssl Openssl 0.9.6kOpenssl Openssl 0.9.6j
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook