Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2006-2937
Modified
More InfoOfficial Page
Source-secalert@redhat.com
View Known Exploited Vulnerability (KEV) details
Published At-28 Sep, 2006 | 18:07
Updated At-18 Oct, 2018 | 16:43

OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.07.8HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
CPE Matches
OpenSSL
openssl
>>openssl>>0.9.7
cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.7a
cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.7b
cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.7c
cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.7d
cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.7e
cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.7f
cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.7g
cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.7h
cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.7i
cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.7j
cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.7k
cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.8
cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.8a
cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.8b
cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*
OpenSSL
openssl
>>openssl>>0.9.8c
cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-399Primarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
Organization : Red Hat
Last Modified : 2007-03-14T00:00:00

Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

References
HyperlinkSourceResource
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.ascsecalert@redhat.com
N/A
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.ascsecalert@redhat.com
N/A
http://docs.info.apple.com/article.html?artnum=304829secalert@redhat.com
N/A
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771secalert@redhat.com
N/A
http://issues.rpath.com/browse/RPL-613secalert@redhat.com
N/A
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100secalert@redhat.com
N/A
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540secalert@redhat.com
N/A
http://kolab.org/security/kolab-vendor-notice-11.txtsecalert@redhat.com
Patch
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.htmlsecalert@redhat.com
N/A
http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.htmlsecalert@redhat.com
Patch
http://lists.vmware.com/pipermail/security-announce/2008/000008.htmlsecalert@redhat.com
N/A
http://marc.info/?l=bind-announce&m=116253119512445&w=2secalert@redhat.com
N/A
http://marc.info/?l=bugtraq&m=130497311408250&w=2secalert@redhat.com
N/A
http://openbsd.org/errata.html#openssl2secalert@redhat.com
Patch
http://openvpn.net/changelog.htmlsecalert@redhat.com
Patch
http://secunia.com/advisories/22094secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22116secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22130secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22165secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22166secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22172secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22186secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22193secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22207secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22212secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22216secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22220secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22240secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22259secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22260secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22284secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22298secalert@redhat.com
N/A
http://secunia.com/advisories/22330secalert@redhat.com
Patch
Vendor Advisory
http://secunia.com/advisories/22385secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/22460secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/22487secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/22544secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/22626secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/22671secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/22758secalert@redhat.com
N/A
http://secunia.com/advisories/22772secalert@redhat.com
N/A
http://secunia.com/advisories/22799secalert@redhat.com
N/A
http://secunia.com/advisories/23038secalert@redhat.com
N/A
http://secunia.com/advisories/23131secalert@redhat.com
N/A
http://secunia.com/advisories/23155secalert@redhat.com
N/A
http://secunia.com/advisories/23280secalert@redhat.com
N/A
http://secunia.com/advisories/23309secalert@redhat.com
N/A
http://secunia.com/advisories/23340secalert@redhat.com
N/A
http://secunia.com/advisories/23351secalert@redhat.com
N/A
http://secunia.com/advisories/23680secalert@redhat.com
N/A
http://secunia.com/advisories/23915secalert@redhat.com
N/A
http://secunia.com/advisories/24930secalert@redhat.com
N/A
http://secunia.com/advisories/24950secalert@redhat.com
N/A
http://secunia.com/advisories/25889secalert@redhat.com
N/A
http://secunia.com/advisories/26329secalert@redhat.com
N/A
http://secunia.com/advisories/30124secalert@redhat.com
N/A
http://secunia.com/advisories/31492secalert@redhat.com
N/A
http://secunia.com/advisories/31531secalert@redhat.com
N/A
http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.ascsecalert@redhat.com
Patch
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200610-11.xmlsecalert@redhat.com
N/A
http://securitytracker.com/id?1016943secalert@redhat.com
Patch
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946secalert@redhat.com
Patch
http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227secalert@redhat.com
N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1secalert@redhat.com
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1secalert@redhat.com
N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1secalert@redhat.com
N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1secalert@redhat.com
N/A
http://support.attachmate.com/techdocs/2374.htmlsecalert@redhat.com
N/A
http://support.avaya.com/elmodocs2/security/ASA-2006-220.htmsecalert@redhat.com
Patch
http://support.avaya.com/elmodocs2/security/ASA-2006-260.htmsecalert@redhat.com
N/A
http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdfsecalert@redhat.com
Patch
Vendor Advisory
http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdfsecalert@redhat.com
N/A
http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.htmlsecalert@redhat.com
N/A
http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtmlsecalert@redhat.com
N/A
http://www.debian.org/security/2006/dsa-1185secalert@redhat.com
Patch
http://www.f-secure.com/security/fsc-2006-6.shtmlsecalert@redhat.com
N/A
http://www.gentoo.org/security/en/glsa/glsa-200612-11.xmlsecalert@redhat.com
N/A
http://www.kb.cert.org/vuls/id/247744secalert@redhat.com
Patch
US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2006:172secalert@redhat.com
N/A
http://www.mandriva.com/security/advisories?name=MDKSA-2006:177secalert@redhat.com
N/A
http://www.mandriva.com/security/advisories?name=MDKSA-2006:178secalert@redhat.com
N/A
http://www.novell.com/linux/security/advisories/2006_24_sr.htmlsecalert@redhat.com
Patch
Vendor Advisory
http://www.novell.com/linux/security/advisories/2006_58_openssl.htmlsecalert@redhat.com
Patch
Vendor Advisory
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.htmlsecalert@redhat.com
Patch
Vendor Advisory
http://www.openssl.org/news/secadv_20060928.txtsecalert@redhat.com
Patch
Vendor Advisory
http://www.osvdb.org/29260secalert@redhat.com
N/A
http://www.redhat.com/support/errata/RHSA-2006-0695.htmlsecalert@redhat.com
Patch
http://www.redhat.com/support/errata/RHSA-2008-0629.htmlsecalert@redhat.com
N/A
http://www.securityfocus.com/archive/1/447318/100/0/threadedsecalert@redhat.com
N/A
http://www.securityfocus.com/archive/1/447393/100/0/threadedsecalert@redhat.com
N/A
http://www.securityfocus.com/archive/1/456546/100/200/threadedsecalert@redhat.com
N/A
http://www.securityfocus.com/archive/1/489739/100/0/threadedsecalert@redhat.com
N/A
http://www.securityfocus.com/bid/20248secalert@redhat.com
Patch
http://www.securityfocus.com/bid/28276secalert@redhat.com
N/A
http://www.serv-u.com/releasenotes/secalert@redhat.com
Patch
http://www.trustix.org/errata/2006/0054secalert@redhat.com
Patch
http://www.ubuntu.com/usn/usn-353-1secalert@redhat.com
Patch
Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA06-333A.htmlsecalert@redhat.com
US Government Resource
http://www.vmware.com/security/advisories/VMSA-2008-0005.htmlsecalert@redhat.com
N/A
http://www.vmware.com/support/ace2/doc/releasenotes_ace2.htmlsecalert@redhat.com
N/A
http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.htmlsecalert@redhat.com
N/A
http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.htmlsecalert@redhat.com
N/A
http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.htmlsecalert@redhat.com
N/A
http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.htmlsecalert@redhat.com
N/A
http://www.vmware.com/support/player/doc/releasenotes_player.htmlsecalert@redhat.com
N/A
http://www.vmware.com/support/player2/doc/releasenotes_player2.htmlsecalert@redhat.com
N/A
http://www.vmware.com/support/server/doc/releasenotes_server.htmlsecalert@redhat.com
N/A
http://www.vmware.com/support/vi3/doc/esx-3069097-patch.htmlsecalert@redhat.com
N/A
http://www.vmware.com/support/vi3/doc/esx-9986131-patch.htmlsecalert@redhat.com
N/A
http://www.vmware.com/support/ws55/doc/releasenotes_ws55.htmlsecalert@redhat.com
N/A
http://www.vmware.com/support/ws6/doc/releasenotes_ws6.htmlsecalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/3820secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/3860secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/3869secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/3902secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/3936secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/4019secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/4036secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/4264secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/4327secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/4329secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/4401secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/4417secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/4750secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/4761secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2006/4980secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2007/0343secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2007/1401secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2007/2315secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2007/2783secalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2008/0905/referencessecalert@redhat.com
N/A
http://www.vupen.com/english/advisories/2008/2396secalert@redhat.com
N/A
http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdfsecalert@redhat.com
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/29228secalert@redhat.com
N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10560secalert@redhat.com
N/A
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144secalert@redhat.com
N/A
Change History
0Changes found
Details not found