CVE-2007-4995 Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors.
HighCVSS 9.3
EPSS 10.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenSSL | = 0.9.8 | No fix listed |
| OpenSSL | = 0.9.8a | No fix listed |
| OpenSSL | = 0.9.8b | No fix listed |
| OpenSSL | = 0.9.8c | No fix listed |
| OpenSSL | = 0.9.8d | No fix listed |
| OpenSSL | = 0.9.8e | No fix listed |
| debian/openssl(Debian:12) | < 0.9.8f-1 | 0.9.8f-1 |
| debian/openssl(Debian:13) | < 0.9.8f-1 | 0.9.8f-1 |
| debian/openssl(Debian:14) | < 0.9.8f-1 | 0.9.8f-1 |
References
- bugs.gentoo.org
- HPSBUX02296 vendor-advisory
- SUSE-SR:2007:021 vendor-advisory
- 25878 third-party-advisory vendor-advisory
- 27205 third-party-advisory vendor-advisory
- 27217 third-party-advisory vendor-advisory
- 27271 third-party-advisory vendor-advisory
- 27363 third-party-advisory vendor-advisory
- 27434 third-party-advisory vendor-advisory
- 27933 third-party-advisory vendor-advisory
- 28084 third-party-advisory vendor-advisory
- 30161 third-party-advisory vendor-advisory
- 30220 third-party-advisory vendor-advisory
- 30852 third-party-advisory vendor-advisory
- GLSA-200710-30 vendor-advisory
- 1018810 vdb-entry
- support.nortel.com
- DSA-1571 vendor-advisory
- GLSA-200805-07 vendor-advisory
- MDKSA-2007:237 vendor-advisory
- www.openssl.org patch
- RHSA-2007:0964 vendor-advisory
- 20071012 OpenSSL Security Advisory mailing-list
- 26055 vdb-entry
- ADV-2007-3487 vdb-entry vendor-advisory
- ADV-2007-4219 vdb-entry vendor-advisory
- ADV-2008-1937 vdb-entry vendor-advisory
- openssl-dtls-code-execution(37185) vdb-entry
- oval:org.mitre.oval:def:10288 signature vdb-entry
- USN-534-1 vendor-advisory
- FEDORA-2007-725 vendor-advisory
- Debian Security Tracker CVE-2007-4995 vendor-advisory