Lucene search
OpenSSLOPENSSL:CVE-2007-5135HistoryOct 12, 2007 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2007-5135
2007-10-1200:00:00
www.openssl-library.org
26
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.569
Percentile
97.8%
A flaw was found in the SSL_get_shared_ciphers() utility function. An attacker could send a list of ciphers to an application that used this function and overrun a buffer with a single byte. Few applications make use of this vulnerable function and generally it is used only when applications are compiled for debugging.
Found by Moritz Jodeit.
Affected configurations
Node
opensslopensslRange0.9.8–0.9.8f
Related
nessus
nessus
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 4477)
2007-12-13 00:00:00
OpenSSL < 0.9.7m / 0.9.8e Buffer Overflow (deprecated)
2012-01-04 00:00:00
SuSE 10 Security Update : compat-openssl097g (ZYPP Patch Number 5055)
2008-03-07 00:00:00
openvas
openvas
Debian Security Advisory DSA 1379-1 (openssl)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1379-1)
2008-01-17 00:00:00
FreeBSD Security Advisory (FreeBSD-SA-07:08.openssl.asc)
2008-09-04 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 0.9.8d-alt4
2007-10-10 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 0.9.8d-alt4
2007-10-10 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8d-alt4
2007-10-10 00:00:00
osv
osv
openssl - arbitrary code execution
2007-10-02 00:00:00
libopenssl-1_0_0-devel-1.0.2u-6.2 on GA media
2024-06-15 00:00:00
libopenssl-1_1-devel-1.1.1l-1.2 on GA media
2024-06-15 00:00:00
debian
debian
[SECURITY] [DSA 1379-1] New openssl packages fix arbitrary code execution
2007-10-02 20:06:48
[SECURITY] [DSA 1379-2] New openssl packages fix arbitrary code execution
2007-10-10 17:59:21
[SECURITY] [DSA 1379-1] New openssl packages fix arbitrary code execution
2007-10-02 20:06:48
checkpoint_security
checkpoint_security
OpenSSLVulnerability CVE-2007-5135 on IPSO 4.2
2008-08-04 21:00:00
Check Point response to OpenSSL vulnerability CVE-2007-5135
2007-10-15 22:00:00
oraclelinux
oraclelinux
Moderate: openssl security update
2007-10-22 00:00:00
openssl security and bug fix update
2007-11-27 00:00:00
Important: openssl security update
2007-10-12 00:00:00
centos
centos
openssl security update
2007-10-22 12:29:21
openssl security update
2007-11-15 15:53:13
openssl security update
2007-10-23 23:23:09
prion
prion
Buffer overflow
2007-09-27 20:17:00
nvd
nvd
CVE-2007-5135
2007-09-27 20:17:00
redhat
redhat
(RHSA-2007:0813) Moderate: openssl security update
2007-10-22 00:00:00
(RHSA-2007:1003) Moderate: openssl security and bug fix update
2007-11-15 00:00:00
(RHSA-2007:0964) Important: openssl security update
2007-10-12 00:00:00
cvelist
cvelist
CVE-2007-5135
2007-09-27 20:00:00
cve
cve
CVE-2007-5135
2007-09-27 20:17:00
securityvulns
securityvulns
ubuntu
ubuntu
openssl vulnerabilities
2007-09-28 00:00:00
ubuntucve
ubuntucve
CVE-2007-5135
2007-09-27 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: openssl-0.9.8b-15.fc6
2007-10-15 20:05:56
[SECURITY] Fedora 7 Update: openssl-0.9.8b-15.fc7
2007-10-18 02:26:18
checkpoint_advisories
checkpoint_advisories
freebsd_advisory
freebsd_advisory
FreeBSD-SA-07:08.openssl
2007-10-03 00:00:00
debiancve
debiancve
CVE-2007-5135
2007-09-27 20:17:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2007-10-07 00:00:00
AMD64 x86 emulation base libraries: Multiple vulnerabilities
2014-12-12 00:00:00
f5
f5
SOL8106 - OpenSSL SSL_get_shared_ciphers vulnerability CVE-2007-5135
2007-11-15 00:00:00
K8106 : OpenSSL SSL_get_shared_ciphers vulnerability CVE-2007-5135
2013-03-27 00:00:00
vmware
vmware
Updated ESX packages for OpenSSL, net-snmp, perl
2008-08-12 00:00:00
Updated ESX packages for OpenSSL, net-snmp, perl
2008-08-12 00:00:00
Updated service console patches.
2008-01-07 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.569
Percentile
97.8%
Related for OPENSSL:CVE-2007-5135