The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained from third party information.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Apply OS X security update 2011-004 | Aug 28, 2015 | Mar 26, 2010 |
| Apple Osx Openssl | — | Upgrade macOS to the latest version | Dec 16, 2011 | Mar 26, 2010 |
| Debian | — | Upgrade openssl | Jul 30, 2024 | Mar 26, 2010 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 3, 2013 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Oct 30, 2017 | Mar 26, 2010 |
| Hpux | — | Update openssl.OPENSSL-INC to the latest versionUpdate openssl.OPENSSL-LIB to the latest versionUpdate openssl.OPENSSL-MIS to the latest versionUpdate openssl.OPENSSL-PVT to the latest versionUpdate openssl.OPENSSL-SRC to the latest versionUpdate openssl.OPENSSL-MAN to the latest versionUpdate openssl.OPENSSL-RUN to the latest versionUpdate openssl.OPENSSL-DOC to the latest versionUpdate openssl.OPENSSL-PRNG to the latest versionUpdate openssl.OPENSSL-CONF to the latest versionUpdate openssl.OPENSSL-CER to the latest version | Aug 11, 2017 | Mar 26, 2010 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Sep 16, 2010 | Mar 26, 2010 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory | Nov 30, 2017 | Mar 26, 2010 |
| Suse | — | Upgrade libopenssl-1_0_0-develUpgrade libopenssl1_0_0-hmacUpgrade libopenssl0_9_8Upgrade libopenssl1_0_0Upgrade openssl-1_1Upgrade openssl-docUpgrade openssl-1_0_0-docUpgrade libopenssl-1_1-develUpgrade libopenssl1-develUpgrade openssl1Upgrade libopenssl1_0_0-32bitUpgrade libopenssl0_9_8-x86Upgrade libopenssl1_1-hmacUpgrade openssl1-docUpgrade libopenssl0_9_8-hmac-32bitUpgrade openssl-1_0_0Upgrade libopenssl0_9_8-hmacUpgrade libopenssl-develUpgrade libopenssl0_9_8-32bitUpgrade libopenssl1_0_0-hmac-32bitUpgrade libopenssl-1_1-devel-32bitUpgrade opensslUpgrade libopenssl1_1-hmac-32bitUpgrade libopenssl1_1-32bitUpgrade libopenssl1_1 | Aug 9, 2024 | Mar 26, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub