CVE-2008-1672
- State
- Published
- Severity
- Not scored
- Published
- May 29, 2008
- Updated
- Aug 7, 2024
- Reserved
- Apr 3, 2008
Description
OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses "particular cipher suites," which triggers a NULL pointer dereference.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html
- SSA:2008-210-08vendor-advisory
- 30852third-party-advisory
- FEDORA-2008-4723vendor-advisory
- openssl-serverkey-dos(42667)vdb-entry
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400
- 30460third-party-advisory
- 30825third-party-advisory
- ADV-2008-1680vdb-entry
- 20080602 rPSA-2008-0181-1 openssl openssl-scriptsmailing-list
- USN-620-1vendor-advisory
- 30868third-party-advisory
- http://www.openssl.org/news/secadv_20080528.txt
- GLSA-200806-08vendor-advisory
- http://sourceforge.net/project/shownotes.php?release_id=615606
- 31288third-party-advisory
- 30405third-party-advisory
- 29405vdb-entry
- 1020122vdb-entry
- ADV-2008-1937vdb-entry
- 31228third-party-advisory
- MDVSA-2008:107vendor-advisory
- VU#520586third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.