VDB
CISA-2004-0079
CISA-2004-0079
PUBLISHED
CVSS 7.5 HIGH
Reported by mitre · Published March 18, 2004
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a, n/a |
Timeline
- Mar 18, 2004 CVE Published
- Jan 16, 2025 CVE Updated
- Mar 17, 2026 Distribution Patch
- Mar 17, 2026 Security Advisory
- Mar 17, 2026 Security Advisory
- Mar 17, 2026 Security Advisory
References
- 9899 vdb-entryx_refsource_BID
- FEDORA-2005-1042 vendor-advisoryx_refsource_FEDORA
- ESA-20040317-003 vendor-advisoryx_refsource_ENGARDE
- SSRT4717 vendor-advisoryx_refsource_HP
- RHSA-2004:121 vendor-advisoryx_refsource_REDHAT
- MDKSA-2004:023 vendor-advisoryx_refsource_MANDRAKE
- oval:org.mitre.oval:def:2621 vdb-entrysignaturex_refsource_OVAL
- CLA-2004:834 vendor-advisoryx_refsource_CONECTIVA
- SCOSA-2004.10 vendor-advisoryx_refsource_SCO
- 17381 third-party-advisoryx_refsource_SECUNIA
- x_refsource_MISC
- FEDORA-2004-095 vendor-advisoryx_refsource_FEDORA
- oval:org.mitre.oval:def:9779 vdb-entrysignaturex_refsource_OVAL
- oval:org.mitre.oval:def:975 vdb-entrysignaturex_refsource_OVAL
- 57524 vendor-advisoryx_refsource_SUNALERT
- SuSE-SA:2004:007 vendor-advisoryx_refsource_SUSE
- x_refsource_CONFIRM
- x_refsource_CONFIRM
- FreeBSD-SA-04:05 vendor-advisoryx_refsource_FREEBSD
- NetBSD-SA2004-005 vendor-advisoryx_refsource_NETBSD
…and 25 more