VDB

DEBIAN-CVE-2002-0656

DEBIAN-CVE-2002-0656 PUBLISHED CVSS 9.300000190734863 CRITICAL

Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.

Risk Scores

CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
Debian:11openssl0, 0, 0
Debian:14openssl0, 0, 0
Debian:13openssl0, 0, 0
Debian:12openssl0, 0, 0

Timeline

  • Aug 12, 2002 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›