CVE-2007-4995

Published: Oct 13, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors.

Affected (6)

Products: Openssl: Openssl

Openssl

1 product

Openssl

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	Version 0.9.8
Openssl Openssl	Version 0.9.8a
Openssl Openssl	Version 0.9.8b
Openssl Openssl	Version 0.9.8c
Openssl Openssl	Version 0.9.8d
Openssl Openssl	Version 0.9.8e

Related CWEs

CWE-189

References (62)

http://bugs.gentoo.org/show_bug.cgi?id=195634

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01299773

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html

Source: secalert@redhat.com

http://secunia.com/advisories/25878

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27205

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27217

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27271

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27363

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27434

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27933

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28084

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30161

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30220

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30852

Source: secalert@redhat.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200710-30.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1018810

Source: secalert@redhat.com

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738962

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1571

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:237

Source: secalert@redhat.com

http://www.openssl.org/news/secadv_20071012.txt

Source: secalert@redhat.com

Patch

http://www.redhat.com/support/errata/RHSA-2007-0964.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/archive/1/482167/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/26055

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3487

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2007/4219

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2008/1937/references

Source: secalert@redhat.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/37185

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10288

Source: secalert@redhat.com

https://usn.ubuntu.com/534-1/

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00218.html

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=195634