Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-4343HistorySep 28, 2006 - 6:07 p.m.
CVE-2006-4343
2006-09-2818:07:00
Debian Security Bug Tracker
security-tracker.debian.org
11
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.016 Low
EPSS
Percentile
87.1%
The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | <Â 0.9.8c-2 | openssl_0.9.8c-2_all.deb |
| Debian | 11 | all | openssl | <Â 0.9.8c-2 | openssl_0.9.8c-2_all.deb |
| Debian | 10 | all | openssl | <Â 0.9.8c-2 | openssl_0.9.8c-2_all.deb |
| Debian | 999 | all | openssl | <Â 0.9.8c-2 | openssl_0.9.8c-2_all.deb |
| Debian | 13 | all | openssl | <Â 0.9.8c-2 | openssl_0.9.8c-2_all.deb |
Related
packetstorm
packetstorm
openssl-dos.txt
2007-12-24 00:00:00
securityvulns
securityvulns
[EXPL] OpenSSL SSLv2 Client Crash (NULL Reference)
2007-12-20 00:00:00
Multiple OpenSSL security vulnerabilities
2007-09-28 00:00:00
[OpenPKG-SA-2006.021] OpenPKG Security Advisory (openssl)
2006-09-29 00:00:00
seebug
seebug
OpenSSL < 0.9.7l / 0.9.8d - SSLv2 Client Crash Exploit
2014-07-01 00:00:00
OpenSSL < 0.9.7l / 0.9.8d SSLv2 Client Crash Exploit
2007-12-24 00:00:00
ubuntucve
ubuntucve
CVE-2006-4343
2006-09-28 00:00:00
exploitpack
exploitpack
OpenSSL SSLv2 - Null Pointer Dereference Client Denial of Service
2006-09-28 00:00:00
OpenSSL 0.9.7l0.9.8d - SSLv2 Client Crash
2007-12-23 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2006-4343
2006-09-28 00:00:00
cve
cve
CVE-2006-4343
2006-09-28 18:07:00
exploitdb
exploitdb
OpenSSL < 0.9.7l/0.9.8d - SSLv2 Client Crash
2007-12-23 00:00:00
OpenSSL SSLv2 - Null Pointer Dereference Client Denial of Service
2006-09-28 00:00:00
openvas
openvas
Debian Security Advisory DSA 1195-1 (openssl096)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1195-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 1185-1 (openssl)
2008-01-17 00:00:00
debian
debian
[SECURITY] [DSA 1195-1] new openssl096 packages fix denial of service
2006-10-10 20:35:20
[SECURITY] [DSA 1195-1] new openssl096 packages fix denial of service
2006-10-10 20:35:20
[SECURITY] [DSA 1185-1] New openssl packages fix denial of service
2006-09-28 17:28:09
nessus
nessus
Debian DSA-1195-1 : openssl096 - denial of service (multiple)
2006-10-20 00:00:00
F5 Networks BIG-IP : Local OpenSSL vulnerabilities (SOL6734)
2014-10-10 00:00:00
Debian DSA-1185-2 : openssl - denial of service
2006-10-14 00:00:00
osv
osv
openssl096
2006-10-10 00:00:00
openssl
2006-09-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.7g-alt5
2006-09-27 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 0.9.7g-alt5
2006-09-27 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 0.9.7g-alt5
2006-09-27 00:00:00
f5
f5
K6734 : Local OpenSSL vulnerabilities VU#547300 and VU#386964, CAN-2006-3738, CAN-2006-2940, CAN-2006-2937, CAN-2006-4343
2013-03-27 00:00:00
SOL6734 - Local OpenSSL vulnerabilities VU#547300 and VU#386964, CAN-2006-3738, CAN-2006-2940, CAN-2006-2937, CAN-2006-4343
2007-05-16 00:00:00
K8106 : OpenSSL SSL_get_shared_ciphers vulnerability CVE-2007-5135
2013-03-27 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2006-10-24 00:00:00
AMD64 x86 emulation base libraries: OpenSSL multiple vulnerabilities
2006-12-11 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-06:23.openssl
2006-09-28 00:00:00
centos
centos
openssl, openssl096b security update
2006-09-29 03:35:21
openssl, openssl095a, openssl096 security update
2006-10-02 01:43:05
suse
suse
remote denial of service in openssl
2006-09-28 16:40:53
redhat
redhat
(RHSA-2006:0695) openssl security update
2006-09-28 00:00:00
slackware
slackware
[slackware-security] openssl
2006-09-29 07:57:13
ubuntu
ubuntu
openssl vulnerabilities
2006-09-29 00:00:00
oraclelinux
oraclelinux
Important openssl security update
2006-11-30 00:00:00
Important openssl security update
2006-11-30 00:00:00
openssl-fips security update
2015-04-02 00:00:00
freebsd
freebsd
OpenSSL -- Multiple problems in crypto(3)
2006-09-28 00:00:00
vmware
vmware
cert
cert
OpenSSL SSL_get_shared_ciphers() vulnerable to buffer overflow
2006-09-28 00:00:00
OpenSSL SSLv2 client code fails to properly check for NULL
2006-09-28 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.016 Low
EPSS
Percentile
87.1%
Related for DEBIANCVE:CVE-2006-4343