CVE-2008-0891
- State
- Published
- Severity
- Not scored
- Published
- May 29, 2008
- Updated
- Aug 7, 2024
- Reserved
- Feb 21, 2008
Description
Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service (crash) via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html
- SSA:2008-210-08vendor-advisory
- 30852third-party-advisory
- FEDORA-2008-4723vendor-advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400
- openssl-servername-dos(42666)vdb-entry
- 30460third-party-advisory
- 30825third-party-advisory
- ADV-2008-1680vdb-entry
- 1020121vdb-entry
- USN-620-1vendor-advisory
- 30868third-party-advisory
- http://www.openssl.org/news/secadv_20080528.txt
- GLSA-200806-08vendor-advisory
- http://sourceforge.net/project/shownotes.php?release_id=615606
- 31288third-party-advisory
- 30405third-party-advisory
- 29405vdb-entry
- ADV-2008-1937vdb-entry
- 31228third-party-advisory
- MDVSA-2008:107vendor-advisory
- VU#661475third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.