The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1185-1 | New openssl packages fix denial of service |
Debian DSA |
DSA-1195-1 | new openssl096 packages fix denial of service |
EUVD |
EUVD-2006-4331 | The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference. |
Ubuntu USN |
USN-353-1 | openssl vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 16 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T19:06:07.432Z
Reserved: 2006-08-24T00:00:00
Link: CVE-2006-4343
No data.
Status : Deferred
Published: 2006-09-28T18:07:00.000
Modified: 2025-04-09T00:30:58.490
Link: CVE-2006-4343
OpenCVE Enrichment
No data.
Debian DSA
EUVD
Ubuntu USN