Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2008-0227

Published: 10/01/2008 Updated: 15/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 830
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Yassl

Vulnerability Summary

yaSSL 1.7.5 and previous versions, as used in MySQL and possibly other products, allows remote malicious users to cause a denial of service (crash) via a Hello packet containing a large size value, which triggers a buffer over-read in the HASHwithTransform::Update function in hash.cpp.

Vulnerable Product Search on Vulmon Subscribe to Product

yassl yassl

Vendor Advisories

Debian Security Advisories: DSA-1478-1 mysql-dfsg-5.0 -- buffer overflows
Luigi Auriemma discovered two buffer overflows in YaSSL, an SSL implementation included in the MySQL database package, which could lead to denial of service and possibly the execution of arbitrary code The old stable distribution (sarge) doesn't contain mysql-dfsg-50 For the stable distribution (etch), these problems have been fixed in version 5 ...
Ubuntu Security Notice: mysql-dfsg-5.0 regression
USN-588-1 fixed vulnerabilities in MySQL In fixing CVE-2007-2692 for Ubuntu 606, additional improvements were made to make privilege checks more restictive As a result, an upstream bug was exposed which could cause operations on tables or views in a different database to fail This update fixes the problem ...
Ubuntu Security Notice: mysql-dfsg-5.0 vulnerabilities
Masaaki Hirose discovered that MySQL could be made to dereference a NULL pointer An authenticated user could cause a denial of service (application crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table This issue only affects Ubuntu 606 and 610 (CVE-2006-7232) ...

References

CWE-119http://www.securityfocus.com/bid/27140http://secunia.com/advisories/28324http://www.debian.org/security/2008/dsa-1478http://secunia.com/advisories/28597http://bugs.mysql.com/33814http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.htmlhttp://www.ubuntu.com/usn/usn-588-1http://secunia.com/advisories/29443http://securityreason.com/securityalert/3531http://www.mandriva.com/security/advisories?name=MDVSA-2008:150http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.htmlhttp://www.securityfocus.com/bid/31681http://secunia.com/advisories/32222http://support.apple.com/kb/HT3216http://www.vupen.com/english/advisories/2008/0560/referenceshttp://www.vupen.com/english/advisories/2008/2780https://exchange.xforce.ibmcloud.com/vulnerabilities/39433http://www.securityfocus.com/archive/1/485810/100/0/threadedhttps://nvd.nist.govhttps://www.debian.org/security/./dsa-1478https://usn.ubuntu.com/588-2/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook