Unscored severity · published Sep 28, 2006
CVE-2006-4343
The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service…
–
CVSS
19.4%
EPSS
No
On KEV
Description
The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.
Exploitation
Is it being used?
Exploit prediction (EPSS)19.4% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
3.1 · source: NVD
OP
Openssl · Openssl
0.9.7; 0.9.7a; 0.9.7b; 0.9.7c; 0.9.7d; 0.9.7e; +10 more · source: NVD
UL
Ubuntu Linux · Canonical
5.04; 5.10; 6.06 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4343
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4343
Third Party Advisory
http://docs.info.apple.com/article.html?artnum=304829
Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771
Broken Link
http://issues.rpath.com/browse/RPL-613
Broken Link
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation