CVE-2008-1678 Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple...
MediumCVSS 5.0
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server mod_ssl that specify a compression algorithm.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenSSL | = 0.9.8f | No fix listed |
| OpenSSL | = 0.9.8g | No fix listed |
| OpenSSL | = 0.9.8h | No fix listed |
| debian/apache2(Debian:12) | < 2.2.8-4 | 2.2.8-4 |
| debian/apache2(Debian:13) | < 2.2.8-4 | 2.2.8-4 |
| debian/apache2(Debian:14) | < 2.2.8-4 | 2.2.8-4 |
References
- bugs.gentoo.org
- APPLE-SA-2008-10-09 vendor-advisory
- SUSE-SR:2008:024 vendor-advisory
- [openssl-dev] 20080512 possible memory leak in zlib compression exploit mailing-list
- 31026 third-party-advisory vendor-advisory
- 31416 third-party-advisory
- 32222 third-party-advisory
- 34219 third-party-advisory
- 35264 third-party-advisory
- 38761 third-party-advisory
- 42724 third-party-advisory
- 42733 third-party-advisory
- 44183 third-party-advisory
- GLSA-200807-06 vendor-advisory
- 3981 third-party-advisory
- SSA:2010-060-02 vendor-advisory
- support.apple.com
- svn.apache.org
- MDVSA-2009:124 vendor-advisory
- RHSA-2009:1075 vendor-advisory
- 31681 vdb-entry
- 31692 vdb-entry
- USN-731-1 vendor-advisory
- ADV-2008-2780 vdb-entry
- bugs.edge.launchpad.net
- bugs.edge.launchpad.net exploit
- bugzilla.redhat.com
- openssl-libssl-dos(43948) vdb-entry
- issues.apache.org
- kb.bluecoat.com
- oval:org.mitre.oval:def:9754 signature vdb-entry
- FEDORA-2008-6393 vendor-advisory
- Debian Security Tracker CVE-2008-1678 vendor-advisory