CVE Vulnerabilities

CVE-2006-2937

Published: Sep 28, 2006 | Modified: Oct 18, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.

Affected Software

Name Vendor Start Version End Version
Openssl Openssl 0.9.8b 0.9.8b
Openssl Openssl 0.9.8c 0.9.8c
Openssl Openssl 0.9.7c 0.9.7c
Openssl Openssl 0.9.7j 0.9.7j
Openssl Openssl 0.9.7k 0.9.7k
Openssl Openssl 0.9.7g 0.9.7g
Openssl Openssl 0.9.7d 0.9.7d
Openssl Openssl 0.9.7 0.9.7
Openssl Openssl 0.9.7e 0.9.7e
Openssl Openssl 0.9.7b 0.9.7b
Openssl Openssl 0.9.8a 0.9.8a
Openssl Openssl 0.9.7i 0.9.7i
Openssl Openssl 0.9.7h 0.9.7h
Openssl Openssl 0.9.8 0.9.8
Openssl Openssl 0.9.7a 0.9.7a
Openssl Openssl 0.9.7f 0.9.7f

References