Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade openssl | Jul 30, 2024 | Oct 13, 2007 |
| Gentoo Linux | — | Upgrade app-emulation/emul-linux-x86-baselibs.Upgrade dev-libs/openssl. | Oct 30, 2017 | Oct 12, 2007 |
| Oracle_linux | — | Upgrade openssl-develUpgrade openssl-perlUpgrade openssl | May 13, 2016 | Oct 13, 2007 |
| Suse | — | Upgrade libopenssl0_9_8-x86Upgrade libopenssl1_0_0Upgrade libopenssl1_0_0-32bitUpgrade libopenssl0_9_8-hmac-32bitUpgrade openssl-docUpgrade libopenssl0_9_8-32bitUpgrade libopenssl-develUpgrade openssl1-docUpgrade libopenssl1-develUpgrade libopenssl0_9_8Upgrade libopenssl-fips-providerUpgrade opensslUpgrade openssl1Upgrade libopenssl0_9_8-hmac | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade libssl0.9.8 | Nov 8, 2024 | Oct 13, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub