Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openssl openssl 0.9.8s vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-0050
OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote malicious users to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.
Openssl Openssl 1.0.0fOpenssl Openssl 0.9.8s
NA
CVE-2011-1473
OpenSSL prior to 0.9.8l, and 0.9.8m up to and including 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, which might make it easier for remote malicious users to cause a denial of service (CPU consumption) by performing many renegot...
Openssl Openssl 0.9.8mOpenssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8uOpenssl Openssl 0.9.8sOpenssl Openssl 0.9.8rOpenssl Openssl 0.9.8tOpenssl Openssl 0.9.8oOpenssl Openssl 0.9.8wOpenssl Openssl 0.9.8vOpenssl Openssl 0.9.8xOpenssl Openssl
NA
CVE-2011-3210
The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 up to and including 0.9.8r and 1.0.x prior to 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote malicious users to cause a denial of service (daemon crash) v...
Openssl Openssl 0.9.8pOpenssl Openssl 0.9.8nOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.8mOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.8sOpenssl Openssl 0.9.8oOpenssl Openssl 0.9.8Openssl Openssl 0.9.8dOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.8lOpenssl Openssl 0.9.8rOpenssl Openssl 0.9.8hOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8kOpenssl Openssl 1.0.0Openssl Openssl 1.0.0d
NA
CVE-2014-3505
Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 prior to 0.9.8zb, 1.0.0 prior to 1.0.0n, and 1.0.1 prior to 1.0.1i allows remote malicious users to cause a denial of service (application crash) via crafted DTLS packets that trigger an error cond...
Openssl Openssl 0.9.8bOpenssl Openssl 0.9.8mOpenssl Openssl 1.0.1Openssl Openssl 0.9.8cOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0Openssl Openssl 1.0.1hOpenssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8uOpenssl Openssl 0.9.8zaOpenssl Openssl 1.0.1gOpenssl Openssl 0.9.8gOpenssl Openssl 1.0.0hOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8dOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0f
NA
CVE-2014-3506
d1_both.c in the DTLS implementation in OpenSSL 0.9.8 prior to 0.9.8zb, 1.0.0 prior to 1.0.0n, and 1.0.1 prior to 1.0.1i allows remote malicious users to cause a denial of service (memory consumption) via crafted DTLS handshake messages that trigger memory allocations correspondi...
Openssl Openssl 0.9.8bOpenssl Openssl 0.9.8mOpenssl Openssl 1.0.1Openssl Openssl 0.9.8cOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0Openssl Openssl 1.0.1hOpenssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8uOpenssl Openssl 0.9.8zaOpenssl Openssl 1.0.1gOpenssl Openssl 0.9.8gOpenssl Openssl 1.0.0hOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8dOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0f
NA
CVE-2014-3507
Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 prior to 0.9.8zb, 1.0.0 prior to 1.0.0n, and 1.0.1 prior to 1.0.1i allows remote malicious users to cause a denial of service (memory consumption) via zero-length DTLS fragments that trigger improper handling of...
Openssl Openssl 0.9.8bOpenssl Openssl 0.9.8mOpenssl Openssl 1.0.1Openssl Openssl 0.9.8cOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0Openssl Openssl 1.0.1hOpenssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8uOpenssl Openssl 0.9.8zaOpenssl Openssl 1.0.1gOpenssl Openssl 0.9.8gOpenssl Openssl 1.0.0hOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8dOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0f
NA
CVE-2014-3508
The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 prior to 0.9.8zb, 1.0.0 prior to 1.0.0n, and 1.0.1 prior to 1.0.1i, when pretty printing is used, does not ensure the presence of '\0' characters, which allows context-dependent malicious users to obt...
Openssl Openssl 0.9.8bOpenssl Openssl 0.9.8mOpenssl Openssl 1.0.1Openssl Openssl 0.9.8cOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0Openssl Openssl 1.0.1hOpenssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8uOpenssl Openssl 0.9.8zaOpenssl Openssl 1.0.1gOpenssl Openssl 0.9.8gOpenssl Openssl 1.0.0hOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8dOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0f
NA
CVE-2014-3510
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 prior to 0.9.8zb, 1.0.0 prior to 1.0.0n, and 1.0.1 prior to 1.0.1i allows remote DTLS servers to cause a denial of service (NULL pointer dereference and client application crash) via a crafted handshake mess...
Openssl Openssl 0.9.8bOpenssl Openssl 0.9.8mOpenssl Openssl 1.0.1Openssl Openssl 0.9.8cOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0Openssl Openssl 1.0.1hOpenssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8uOpenssl Openssl 0.9.8zaOpenssl Openssl 1.0.1gOpenssl Openssl 0.9.8gOpenssl Openssl 1.0.0hOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8dOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0f
NA
CVE-2006-7250
The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and previous versions allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.
Openssl OpensslOpenssl Openssl 0.9.7Openssl Openssl 0.9.5aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.8mOpenssl Openssl 0.9.3Openssl Openssl 0.9.8cOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.5Openssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.6Openssl Openssl 0.9.7jOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.4Openssl Openssl 0.9.8gOpenssl Openssl 0.9.8k
NA
CVE-2012-0027
The GOST ENGINE in OpenSSL prior to 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote malicious users to cause a denial of service (daemon crash) via crafted data from a TLS client.
Openssl Openssl 1.0.0Openssl Openssl 0.9.8nOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0bOpenssl Openssl 0.9.8sOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8hOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.7iOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.7Openssl Openssl 0.9.6mOpenssl Openssl 0.9.6gOpenssl Openssl 0.9.6fOpenssl Openssl 0.9.5Openssl Openssl 0.9.4Openssl Openssl 1.0.0aOpenssl Openssl 0.9.8rOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8f
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook