Lucene search
OpenSSLOPENSSL:CVE-2007-5135HistoryOct 12, 2007 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2007-5135
2007-10-1200:00:00
www.openssl.org
21
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
9.4 High
AI Score
Confidence
High
0.58 Medium
EPSS
Percentile
97.7%
A flaw was found in the SSL_get_shared_ciphers() utility function. An attacker could send a list of ciphers to an application that used this function and overrun a buffer with a single byte. Few applications make use of this vulnerable function and generally it is used only when applications are compiled for debugging.
Related
nessus
nessus
SuSE 10 Security Update : compat-openssl097g (ZYPP Patch Number 5055)
2008-03-07 00:00:00
OpenSSL < 0.9.7m / 0.9.8e Buffer Overflow (deprecated)
2012-01-04 00:00:00
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 4477)
2007-12-13 00:00:00
openvas
openvas
FreeBSD Security Advisory (FreeBSD-SA-07:08.openssl.asc)
2008-09-04 00:00:00
HP-UX Update for Apache HPSBUX02292
2009-05-05 00:00:00
SLES10: Security update for compat-openssl097g
2009-10-13 00:00:00
checkpoint_security
checkpoint_security
OpenSSLVulnerability CVE-2007-5135 on IPSO 4.2
2008-08-04 21:00:00
Check Point response to OpenSSL vulnerability CVE-2007-5135
2007-10-15 22:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 0.9.8d-alt4
2007-10-10 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 0.9.8d-alt4
2007-10-10 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8d-alt4
2007-10-10 00:00:00
osv
osv
openssl - arbitrary code execution
2007-10-02 00:00:00
debian
debian
[SECURITY] [DSA 1379-1] New openssl packages fix arbitrary code execution
2007-10-02 20:06:48
[SECURITY] [DSA 1379-2] New openssl packages fix arbitrary code execution
2007-10-10 17:59:21
[SECURITY] [DSA 1379-1] New openssl packages fix arbitrary code execution
2007-10-02 20:06:48
redhat
redhat
(RHSA-2007:0813) Moderate: openssl security update
2007-10-22 00:00:00
(RHSA-2007:1003) Moderate: openssl security and bug fix update
2007-11-15 00:00:00
(RHSA-2007:0964) Important: openssl security update
2007-10-12 00:00:00
cvelist
cvelist
CVE-2007-5135
2007-09-27 20:00:00
oraclelinux
oraclelinux
openssl security and bug fix update
2007-11-27 00:00:00
Moderate: openssl security update
2007-10-22 00:00:00
Important: openssl security update
2007-10-12 00:00:00
centos
centos
openssl security update
2007-11-15 15:53:13
openssl security update
2007-10-23 23:23:09
openssl security update
2007-10-22 12:29:21
fedora
fedora
[SECURITY] Fedora Core 6 Update: openssl-0.9.8b-15.fc6
2007-10-15 20:05:56
[SECURITY] Fedora 7 Update: openssl-0.9.8b-15.fc7
2007-10-18 02:26:18
ubuntu
ubuntu
openssl vulnerabilities
2007-09-28 00:00:00
ubuntucve
ubuntucve
CVE-2007-5135
2007-09-27 00:00:00
prion
prion
Buffer overflow
2007-09-27 20:17:00
nvd
nvd
CVE-2007-5135
2007-09-27 20:17:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-07:08.openssl
2007-10-03 00:00:00
debiancve
debiancve
CVE-2007-5135
2007-09-27 20:17:00
checkpoint_advisories
checkpoint_advisories
securityvulns
securityvulns
cve
cve
CVE-2007-5135
2007-09-27 20:17:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2007-10-07 00:00:00
AMD64 x86 emulation base libraries: Multiple vulnerabilities
2014-12-12 00:00:00
vmware
vmware
Updated ESX packages for OpenSSL, net-snmp, perl
2008-08-12 00:00:00
Updated ESX packages for OpenSSL, net-snmp, perl
2008-08-12 00:00:00
Updated service console patches.
2008-01-07 00:00:00
f5
f5
K8106 : OpenSSL SSL_get_shared_ciphers vulnerability CVE-2007-5135
2013-03-27 00:00:00
SOL8106 - OpenSSL SSL_get_shared_ciphers vulnerability CVE-2007-5135
2007-11-15 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
9.4 High
AI Score
Confidence
High
0.58 Medium
EPSS
Percentile
97.7%
Related for OPENSSL:CVE-2007-5135