Lucene search
OpenSSLOPENSSL:CVE-2006-3738HistorySep 28, 2006 - 12:00 a.m.
Vulnerability in OpenSSL - SSL_get_shared_ciphers() buffer overflow
2006-09-2800:00:00
www.openssl-library.org
46
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.3
Confidence
High
EPSS
0.964
Percentile
99.6%
A buffer overflow was discovered in the SSL_get_shared_ciphers() utility function. An attacker could send a list of ciphers to an application that uses this function and overrun a buffer.
Found by openssl.
Affected configurations
Node
opensslopensslRange0.9.7â0.9.7l
ORopensslopensslRange0.9.8â0.9.8d
Related
cve
cve
CVE-2006-3738
2006-09-28 18:07:00
CVE-2007-5135
2007-09-27 20:17:00
ubuntucve
ubuntucve
CVE-2006-3738
2006-09-28 00:00:00
CVE-2007-5135
2007-09-27 00:00:00
nvd
nvd
CVE-2006-3738
2006-09-28 18:07:00
CVE-2007-5135
2007-09-27 20:17:00
checkpoint_security
checkpoint_security
Check Point response to OpenSSL vulnerability CVE-2006-3738
2007-10-27 22:00:00
cvelist
cvelist
CVE-2006-3738
2006-09-28 18:00:00
CVE-2007-5135
2007-09-27 20:00:00
debiancve
debiancve
CVE-2006-3738
2006-09-28 18:07:00
CVE-2007-5135
2007-09-27 20:17:00
prion
prion
Buffer overflow
2007-09-27 20:17:00
checkpoint_advisories
checkpoint_advisories
freebsd_advisory
freebsd_advisory
FreeBSD-SA-07:08.openssl
2007-10-03 00:00:00
FreeBSD-SA-06:23.openssl
2006-09-28 00:00:00
osv
osv
openssl096
2006-10-10 00:00:00
openssl
2006-09-28 00:00:00
libopenssl-1_0_0-devel-1.0.2u-6.2 on GA media
2024-06-15 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2007-10-07 00:00:00
AMD64 x86 emulation base libraries: OpenSSL multiple vulnerabilities
2006-12-11 00:00:00
OpenSSL: Multiple vulnerabilities
2006-10-24 00:00:00
debian
debian
[SECURITY] [DSA 1195-1] new openssl096 packages fix denial of service
2006-10-10 20:35:20
[SECURITY] [DSA 1195-1] new openssl096 packages fix denial of service
2006-10-10 20:35:20
[SECURITY] [DSA 1185-1] New openssl packages fix denial of service
2006-09-28 17:28:09
openvas
openvas
Debian Security Advisory DSA 1195-1 (openssl096)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200710-06 (openssl)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200710-06 (openssl)
2008-09-24 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : openssl (MDKSA-2007:193)
2007-10-09 00:00:00
GLSA-200710-06 : OpenSSL: Multiple vulnerabilities
2007-10-09 00:00:00
OpenSSL 0.9.8 < 0.9.8f Multiple Vulnerabilities
2012-01-04 00:00:00
slackware
slackware
[slackware-security] openssl
2006-09-29 07:57:13
ubuntu
ubuntu
openssl vulnerabilities
2006-09-29 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.7g-alt5
2006-09-27 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 0.9.7g-alt5
2006-09-27 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 0.9.7g-alt5
2006-09-27 00:00:00
f5
f5
SOL6734 - Local OpenSSL vulnerabilities VU#547300 and VU#386964, CAN-2006-3738, CAN-2006-2940, CAN-2006-2937, CAN-2006-4343
2007-05-16 00:00:00
K6734 : Local OpenSSL vulnerabilities VU#547300 and VU#386964, CAN-2006-3738, CAN-2006-2940, CAN-2006-2937, CAN-2006-4343
2013-03-27 00:00:00
K8106 : OpenSSL SSL_get_shared_ciphers vulnerability CVE-2007-5135
2013-03-27 00:00:00
centos
centos
openssl, openssl096b security update
2006-09-29 03:35:21
openssl, openssl095a, openssl096 security update
2006-10-02 01:43:05
redhat
redhat
(RHSA-2006:0695) openssl security update
2006-09-28 00:00:00
suse
suse
remote denial of service in openssl
2006-09-28 16:40:53
oraclelinux
oraclelinux
Important openssl security update
2006-11-30 00:00:00
Important openssl security update
2006-11-30 00:00:00
openssl-fips security update
2015-04-02 00:00:00
securityvulns
securityvulns
[OpenPKG-SA-2006.021] OpenPKG Security Advisory (openssl)
2006-09-29 00:00:00
freebsd
freebsd
OpenSSL -- Multiple problems in crypto(3)
2006-09-28 00:00:00
cert
cert
OpenSSL SSL_get_shared_ciphers() vulnerable to buffer overflow
2006-09-28 00:00:00
OpenSSL SSLv2 client code fails to properly check for NULL
2006-09-28 00:00:00
seebug
seebug
Apple Mac OS X 2006-007ććšć€äžȘćźć
šæŒæŽ
2006-11-29 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.3
Confidence
High
EPSS
0.964
Percentile
99.6%
Related for OPENSSL:CVE-2006-3738