CVE-2008-0891

Published: May 29, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service (crash) via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information.

Affected (2)

Products: Openssl: Openssl

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	Version 0.9.8f
Openssl Openssl	Version 0.9.8g

Related CWEs

References (44)

http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html

Source: secalert@redhat.com

http://secunia.com/advisories/30405

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/30460

Source: secalert@redhat.com

http://secunia.com/advisories/30825

Source: secalert@redhat.com

http://secunia.com/advisories/30852

Source: secalert@redhat.com

http://secunia.com/advisories/30868

Source: secalert@redhat.com

http://secunia.com/advisories/31228

Source: secalert@redhat.com

http://secunia.com/advisories/31288

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200806-08.xml

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004

Source: secalert@redhat.com

http://sourceforge.net/project/shownotes.php?release_id=615606

Source: secalert@redhat.com

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/661475

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2008:107

Source: secalert@redhat.com

http://www.openssl.org/news/secadv_20080528.txt

Source: secalert@redhat.com

http://www.securityfocus.com/bid/29405

Source: secalert@redhat.com

Patch

http://www.securitytracker.com/id?1020121

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-620-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1680

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1937/references

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/42666

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.html

Source: secalert@redhat.com

http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30405

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/30460

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30825

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30852

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30868

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31228

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/31288

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200806-08.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/project/shownotes.php?release_id=615606

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/661475

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2008:107

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openssl.org/news/secadv_20080528.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/29405

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securitytracker.com/id?1020121

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-620-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/1680

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/1937/references

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/42666

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.