Description

The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.

Remediation

References

CVE-2006-4343

Related Vulnerabilities

Plone CMS Resource Management Errors Vulnerability (CVE-2013-4188)

MediaWiki CVE-2019-12472 Vulnerability (CVE-2019-12472)

WordPress CVE-2011-3122 Vulnerability (CVE-2011-3122)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43721)

AngularJS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14863)

Severity

Medium

Classification

CVE-2006-4343 CWE-476

Tags

Missing Update Known Vulnerabilities