CVE-2006-4343

🗓️ 28 Sep 2006 18:00:00Reported by redhatType

The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference

Reporter	Title	Published	Views	Family All 188
zdt	OpenSSL < 0.9.7l / 0.9.8d SSLv2 Client Crash Exploit	23 Dec 200700:00	–	zdt
ALT Linux	Security fix for the ALT Linux 9 package openssl1.1 version 0.9.7g-alt5	27 Sep 200600:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package openssl10 version 0.9.7g-alt5	27 Sep 200600:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package openssl10 version 0.9.7g-alt5	27 Sep 200600:00	–	altlinux
BDU FSTEC	Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 3 / 4 : openssl (CESA-2006:0695)	2 Oct 200600:00	–	nessus
Tenable Nessus	Rocky Linux 8.10 [CIQ] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (ciqsa-2026_0606)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8.10 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (ciqsa-2026_0607)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8.10 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (ciqsa-2026_0640)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8.10 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (ciqsa-2026_1206)	1 Oct 202600:00	–	nessus

NVD

Node

openssl opensslMatch0.9.7

openssl opensslMatch0.9.7a

openssl opensslMatch0.9.7b

openssl opensslMatch0.9.7c

openssl opensslMatch0.9.7d

openssl opensslMatch0.9.7e

openssl opensslMatch0.9.7f

openssl opensslMatch0.9.7g

openssl opensslMatch0.9.7h

openssl opensslMatch0.9.7i

openssl opensslMatch0.9.7j

openssl opensslMatch0.9.7k

openssl opensslMatch0.9.8

openssl opensslMatch0.9.8a

openssl opensslMatch0.9.8b

openssl opensslMatch0.9.8c

Node

debian debian_linuxMatch3.1

Node

canonical ubuntu_linuxMatch5.04

canonical ubuntu_linuxMatch5.10

canonical ubuntu_linuxMatch6.06lts

Source	Link
openssl	www.openssl.org/news/secadv_20060928.txt
support	www.support.avaya.com/elmodocs2/security/ASA-2006-220.htm
vupen	www.vupen.com/english/advisories/2006/3902
secunia	www.secunia.com/advisories/22240
secunia	www.secunia.com/advisories/24950
secunia	www.secunia.com/advisories/22166
itrc	www.itrc.hp.com/service/cki/docDisplay.do
secunia	www.secunia.com/advisories/25420
securityfocus	www.securityfocus.com/bid/20246
secunia	www.secunia.com/advisories/22298

16 Jun 2026 22:28Current

8.3High risk

Vulners AI Score8.3

CVSS 24.3

EPSS0.19068

CWE-476