Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2008-0891
HistoryMay 29, 2008 - 12:00 a.m.

CVE-2008-0891

2008-05-2900:00:00
ubuntu.com
ubuntu.com
10

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.132 Low

EPSS

Percentile

95.5%

JSON

Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server
name extensions are enabled, allows remote attackers to cause a denial of
service (crash) via a malformed Client Hello packet. NOTE: some of these
details are obtained from third party information.

Bugs

Notes

Author Note
kees I don’t think we’re compile with this option at all?
jdstrand tlsext not enabled until 0.9.8g-5, so this is negligible on hardy
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchopenssl<Β 0.9.8g-4ubuntu3.3UNKNOWN

Related

cert 1
prion 1
cve 1
openssl 1
debiancve 1
nessus 9
openvas 16
gentoo 1
ubuntu 1
seebug 1
slackware 1
fedora 3
f5 2
oraclelinux 3
cert
cert
OpenSSL Server Name extension Denial of Service
2008-05-30 00:00:00
prion
prion
Double free
2008-05-29 16:32:00
cve
cve
CVE-2008-0891
2008-05-29 16:32:00
openssl
openssl
Vulnerability in OpenSSL CVE-2008-0891
2008-05-28 00:00:00
debiancve
debiancve
CVE-2008-0891
2008-05-29 16:32:00
nessus
nessus
Ubuntu 8.04 LTS : openssl vulnerabilities (USN-620-1)
2008-07-02 00:00:00
Fedora 9 : openssl-0.9.8g-9.fc9 (2008-4723)
2008-06-02 00:00:00
Slackware 11.0 / 12.0 / 12.1 / current : openssl (SSA:2008-210-08)
2008-07-29 00:00:00
openvas
openvas
Slackware Advisory SSA:2008-210-08 openssl
2012-09-11 00:00:00
Gentoo Security Advisory GLSA 200806-08 (openssl)
2008-09-24 00:00:00
Slackware: Security Advisory (SSA:2008-210-08)
2012-09-10 00:00:00
gentoo
gentoo
OpenSSL: Denial of service
2008-06-23 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2008-06-26 00:00:00
seebug
seebug
OpenSSL倚δΈͺζ‹’η»ζœεŠ‘ζΌζ΄ž
2008-05-29 00:00:00
slackware
slackware
[slackware-security] openssl
2008-07-29 05:33:50
fedora
fedora
[SECURITY] Fedora 9 Update: openssl-0.9.8g-9.fc9
2008-05-31 02:14:16
[SECURITY] Fedora 9 Update: openssl-0.9.8g-9.12.fc9
2009-01-08 04:19:17
[SECURITY] Fedora 9 Update: openssl-0.9.8g-9.14.fc9
2009-06-19 13:40:57
f5
f5
K17454 : OpenSSL vulnerabilities CVE-2005-2946, CVE-2008-0891, and CVE-2012-2131
2015-10-16 00:00:00
SOL17454 - OpenSSL vulnerabilities CVE-2005-2946, CVE-2008-0891, and CVE-2012-2131
2015-10-16 00:00:00
oraclelinux
oraclelinux
openssl-fips security update
2015-04-02 00:00:00
openssl security update
2019-03-13 00:00:00
openssl security update
2019-08-16 00:00:00

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.132 Low

EPSS

Percentile

95.5%

JSON
Related for UB:CVE-2008-0891
cert1prion1cve1openssl1debiancve1nessus9openvas16gentoo1ubuntu1seebug1slackware1fedora3f52oraclelinux3