Buffer overflow

2008-01-1023:46:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.975 High

EPSS

Percentile

99.9%

JSON

Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) “input_buffer& operator>>” in yassl_imp.cpp.

CPENameOperatorVersion
mac_os_xeq10.5.4
ubuntu_linuxeq6.06
ubuntu_linuxeq7.04
ubuntu_linuxeq7.10
ubuntu_linuxeq6.10
debian_linuxeq5.0
mysqleq5.0.5
mysqleq5.0.10
mysqleq5.0.54
mysqleq5.0.0

Name	Operator	Version
mac_os_x	eq	10.5.4
ubuntu_linux	eq	6.06
ubuntu_linux	eq	7.04
ubuntu_linux	eq	7.10
ubuntu_linux	eq	6.10
debian_linux	eq	5.0
mysql	eq	5.0.5
mysql	eq	5.0.10
mysql	eq	5.0.54
mysql	eq	5.0.0