Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat openssl 0.9.6b-3 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-1387
The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL prior to 1.0.0 Beta 2 allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug.&q...
Openssl OpensslRedhat Openssl 0.9.6-15Redhat Openssl 0.9.6b-3Redhat Openssl 0.9.7a-2Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 8.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 6.06
NA
CVE-2009-1386
ssl/s3_pkt.c in OpenSSL prior to 0.9.8i allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.
Openssl OpensslRedhat Openssl 0.9.6-15Redhat Openssl 0.9.6b-3Redhat Openssl 0.9.7a-2Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 8.10Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 6.06
NA
CVE-2009-4355
Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and previous versions and 1.0.0 Beta through Beta 4 allows remote malicious users to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cl...
Openssl OpensslOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8dOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7eRedhat Openssl 0.9.7a-2Openssl Openssl 0.9.8fOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.7Openssl Openssl 0.9.7fOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.6Openssl Openssl 0.9.6cOpenssl Openssl 0.9.6bOpenssl Openssl 0.9.5Openssl Openssl 0.9.5aOpenssl Openssl 0.9.2bOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.8hOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.7a
NA
CVE-2012-2110
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL prior to 0.9.8v, 1.0.0 prior to 1.0.0i, and 1.0.1 prior to 1.0.1a does not properly interpret integer data, which allows remote malicious users to conduct buffer overflow attacks, and cause a denial of service (m...
Openssl Openssl 1.0.0Openssl Openssl 1.0.0aOpenssl Openssl 1.0.0gOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0bOpenssl OpensslOpenssl Openssl 0.9.8rOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.7Openssl Openssl 0.9.7dOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.6hOpenssl Openssl 0.9.6m
NA
CVE-2012-2333
Integer underflow in OpenSSL prior to 0.9.8x, 1.0.0 prior to 1.0.0j, and 1.0.1 prior to 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote malicious users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via ...
Openssl Openssl 0.9.8mOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8hOpenssl OpensslOpenssl Openssl 0.9.8vOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8oOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.7Openssl Openssl 0.9.7dOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.6Openssl Openssl 0.9.6bOpenssl Openssl 0.9.6eRedhat Openssl 0.9.6-15Openssl Openssl 0.9.8uOpenssl Openssl 0.9.8tOpenssl Openssl 0.9.8s
NA
CVE-2013-0166
OpenSSL prior to 0.9.8y, 1.0.0 prior to 1.0.0k, and 1.0.1 prior to 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
Openssl Openssl 0.9.7Openssl Openssl 0.9.5aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.8mOpenssl Openssl 0.9.3Openssl Openssl 0.9.8cOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.5Openssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.6Openssl Openssl 1.0.1cOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8u
NA
CVE-2004-0112
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshak...
Cisco Firewall Services ModuleSymantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1.2Hp Aaa ServerCisco Firewall Services Module 1.1 \\(3.005\\)Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Avaya Sg203 4.4Hp Hp-ux 11.11Redhat Enterprise Linux Desktop 3.0Hp Hp-ux 11.23Cisco Ciscoworks Common Management Foundation 2.1Freebsd Freebsd 5.1Avaya Sg208 4.4Redhat Enterprise Linux 3.0Avaya Sg200 4.4Avaya Sg5 4.4Redhat Linux 7.2Cisco Ciscoworks Common Services 2.2Openbsd Openbsd 3.3
7.5
CVSSv3
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Cisco Firewall Services ModuleSymantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1.2Hp Aaa ServerCisco Firewall Services Module 1.1 \\(3.005\\)Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Avaya Sg203 4.4Hp Hp-ux 11.11Redhat Enterprise Linux Desktop 3.0Hp Hp-ux 11.23Cisco Ciscoworks Common Management Foundation 2.1Freebsd Freebsd 5.1Avaya Sg208 4.4Redhat Enterprise Linux 3.0Avaya Sg200 4.4Avaya Sg5 4.4Redhat Linux 7.2Cisco Ciscoworks Common Services 2.2Openbsd Openbsd 3.3
NA
CVE-2004-0081
OpenSSL 0.9.6 prior to 0.9.6d does not properly handle unknown message types, which allows remote malicious users to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1 \\(3.005\\)Cisco Firewall Services ModuleCisco Firewall Services Module 1.1.2Symantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Hp Aaa ServerCisco Ciscoworks Common Management Foundation 2.1Cisco Ciscoworks Common Services 2.2Avaya Sg208 4.4Avaya Sg5 4.2Avaya Sg5 4.3Freebsd Freebsd 5.1Hp Hp-ux 8.05Openbsd Openbsd 3.3Redhat Linux 8.0Sco Openserver 5.0.6Avaya Sg203 4.4Avaya Sg208Freebsd Freebsd 4.8
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
hard-codedCVE-2024-27202NULL pointer dereferenceCVE-2024-28075CVE-2024-33608CVE-2024-28889CVE-2024-34572template injectionCVE-2024-34351
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook