CVE-2006-4343

The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

19.07% chance of exploitation in the next 30 days, 97th percentile

Published

2006-09-28

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/28726
• https://www.exploit-db.com/exploits/4773

References

• CVE Record
• NVD entry

Related

• CVE-2006-4329
• CVE-2006-4348
• CVE-2006-4322
• CVE-2006-4349
• CVE-2006-4321
• CVE-2006-4354