CVE-2008-0891

OpenSSL 0.9.8f and 0.9.8g - Denial of Service via Malformed Client Hello Packet

Title source: llm

Description

Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service (crash) via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information.

References (22)

Core 22

Core References

Various Sources x_refsource_misc

http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html

Vendor Advisory vendor-advisory x_refsource_slackware

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30852

Vendor Advisory vendor-advisory x_refsource_fedora

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.html

Various Sources x_refsource_misc

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/42666

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30460

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30825

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1680

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1020121

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/usn-620-1

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30868

Vendor Advisory x_refsource_confirm

http://www.openssl.org/news/secadv_20080528.txt

Third Party Advisory vendor-advisory x_refsource_gentoo

http://security.gentoo.org/glsa/glsa-200806-08.xml

Product x_refsource_confirm

http://sourceforge.net/project/shownotes.php?release_id=615606

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31288

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30405

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/29405

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1937/references

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31228

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDVSA-2008:107

US Government Resource third-party-advisory x_refsource_cert-vn

http://www.kb.cert.org/vuls/id/661475

Scores

EPSS 0.1128

EPSS Percentile 93.6%

Details

CWE

CWE-189

Status published

Products (2)

openssl/openssl 0.9.8f

openssl/openssl 0.9.8g

Published May 29, 2008

Tracked Since Feb 18, 2026