CVE-2002-0655
published 2002-08-12CVE-2002-0655: OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow…
PriorityP429high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
8.17%
94.2th percentile
OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.
Affected
37 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| debian | openssl | < openssl 0.9.6e-1 (bookworm) | openssl 0.9.6e-1 (bookworm) |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | — | — |
| openssl | openssl | >= 0 < 0.9.6e-1 | 0.9.6e-1 |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2002-07-30·CVSS 7.5
CVE-2002-0655 [HIGH] security flaw
security flaw
OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.
Debian
CVE-2002-0655: openssl - OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handl...
vendor_debian·2002·CVSS 7.5
CVE-2002-0655 [HIGH] CVE-2002-0655: openssl - OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handl...
OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.
Scope: local
bookworm: resolved (fixed in 0.9.6e-1)
bullseye: resolved (fixed in 0.9.6e-1)
forky: resolved (fixed in 0.9.6e-1)
sid: resolved (fixed in 0.9.6e-1)
trixie: resolved (fixed in 0.9.6e-1)
GHSA
GHSA-qqh8-wx7x-qgh9: OpenSSL 0
ghsa_unreviewed·2022-05-03
CVE-2002-0655 [HIGH] GHSA-qqh8-wx7x-qgh9: OpenSSL 0
OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.
OSV
CVE-2002-0655: OpenSSL 0
osv·2002-08-12·CVSS 7.5
CVE-2002-0655 [HIGH] CVE-2002-0655: OpenSSL 0
OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.
No detection rules found.
No public exploits indexed.
ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txtftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txtftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.aschttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513http://www.cert.org/advisories/CA-2002-23.htmlhttp://www.kb.cert.org/vuls/id/308891http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.phphttp://www.securityfocus.com/bid/5364ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txtftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txtftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.aschttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513http://www.cert.org/advisories/CA-2002-23.htmlhttp://www.kb.cert.org/vuls/id/308891http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.phphttp://www.securityfocus.com/bid/5364
2002-08-12
Published