Lucene search

K
cvelistMitreCVELIST:CVE-2007-5135
HistorySep 27, 2007 - 8:00 p.m.

CVE-2007-5135

2007-09-2720:00:00
mitre
raw.githubusercontent.com
1

7.7 High

AI Score

Confidence

Low

0.61 Medium

EPSS

Percentile

97.8%

Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738. As of 20071012, it is unknown whether code execution is possible.