OpenSSL contains null-pointer assignment in do_change_cipher_spec() function

Overview OpenSSL contains a null-pointer assignment in the dochangecipherspec function which could allow a remote, unauthenticated attacker to cause OpenSSL to crash. Description OpenSSL implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols and includes a general...

Vulnerability in OpenSSL CVE-2004-0079

The Codenomicon TLS Test Tool uncovered a null-pointer assignment in the dochangecipherspec function. A remote attacker could perform a carefully crafted SSL/TLS handshake against a server that used the OpenSSL library in such a way as to cause a crash. Found by OpenSSL group...

Security fix for the ALT Linux 8 package openssl10 version 0.9.6l-alt2

March 17, 2004 Dmitry V. Levin 0.9.6l-alt2 - Fixed null-pointer assignment during SSL handshake CAN-2004-0079...

[SECURITY] [DSA 173-1] New bugzilla packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 173-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2002 http://www.debian.org/security/faq -...

CVE-2001-0187

Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment...

CVE-2017-1059

CVE-2017-1059 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2022-40154

CVE-2022-40154 is rejected; this CVE entry is not an active vulnerability.

CVE-2021-38577

CVE-2021-38577 is linked in several sources to a heap overflow in BaseBmpSupportLib within Tianocore Edk2. The available connected documents confirm a BaseBmpSupportLib heap overflow as the underlying issue, but there are no public details in these documents about affected versions, exploitabilit...

CVE-2021-41984

CVE-2021-41984 entry is rejected/not used and does not represent an active vulnerability.

CVE-2023-2918

CVE-2023-2918 is rejected/not used per the Initial Description.

CVE-2022-32713

CVE-2022-32713 is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-2230

CVE-2023-2230 entry is rejected/not used per the Initial Description.

CVE-2024-1444

CVE-2024-1444 entry is rejected/not used per the Initial Description.

CVE-2024-1469

CVE-2024-1469 is a duplicate entry; the connected document confirms this and points to CVE-2024-0845 as the valid reference. CVE-2024-0845 concerns PDF Viewer for Elementor (WordPress) up to version 2.9.3, with an authenticated Stored Cross-Site Scripting vulnerability via the render function. Th...