CVE-2007-4995 — Off-by-one Error in Openssl

CWE-1897 documents7 sources
Severity
9.3CRITICALNVD
EPSS
10.6%
top 6.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
OpensslDebian Openssl
Timeline
PublishedOct 13
Latest updateMay 1

Description

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶debiandebian/openssl< openssl 0.9.8f-1 (bookworm)
▶Debianopenssl/openssl< 0.9.8f-1+3
▶NVDopenssl/openssl6 versions+5

Patches

Patch: www.openssl.org ↗Patch: www.openssl.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-wf86-8369-qhfj: Off-by-one error in the DTLS implementation in OpenSSL 0↗2022-05-01
▶
OSV
CVE-2007-4995: Off-by-one error in the DTLS implementation in OpenSSL 0↗2007-10-13
▶

📋Vendor Advisories

3
Ubuntu
OpenSSL vulnerability↗2007-10-22
▶
Red Hat
openssl dtls out of order vulnerabilitiy↗2007-10-12
▶
Debian
CVE-2007-4995: openssl - Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allow...↗2007
▶

💬Community

1
Bugzilla
CVE-2007-4995 openssl dtls out of order vulnerabilitiy↗2007-10-06
▶