7.8

CVE-2006-2937

OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.

Data is provided by the National Vulnerability Database (NVD)
OpenSSL ≫ OpenSSL Version0.9.7
OpenSSL ≫ OpenSSL Version0.9.7a
OpenSSL ≫ OpenSSL Version0.9.7b
OpenSSL ≫ OpenSSL Version0.9.7c
OpenSSL ≫ OpenSSL Version0.9.7d
OpenSSL ≫ OpenSSL Version0.9.7e
OpenSSL ≫ OpenSSL Version0.9.7f
OpenSSL ≫ OpenSSL Version0.9.7g
OpenSSL ≫ OpenSSL Version0.9.7h
OpenSSL ≫ OpenSSL Version0.9.7i
OpenSSL ≫ OpenSSL Version0.9.7j
OpenSSL ≫ OpenSSL Version0.9.7k
OpenSSL ≫ OpenSSL Version0.9.8
OpenSSL ≫ OpenSSL Version0.9.8a
OpenSSL ≫ OpenSSL Version0.9.8b
OpenSSL ≫ OpenSSL Version0.9.8c
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 5.75% 0.901
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
http://www.kb.cert.org/vuls/id/247744
Patch
US Government Resource