Description

The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.

Remediation

References

CVE-2006-4343

Related Vulnerabilities

WordPress Plugin Weaver Show Posts Cross-Site Scripting (1.6)

WordPress Plugin GN Publisher: Google News Compatible RSS Feeds Cross-Site Scripting (1.5.5)

Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-10681)

Ruby Numeric Errors Vulnerability (CVE-2008-2726)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7830)

Severity

Medium

Classification

CVE-2006-4343 CWE-476

Tags

Missing Update Known Vulnerabilities