VDB
DEBIAN-CVE-2007-5135
DEBIAN-CVE-2007-5135
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738. As of 20071012, it is unknown whether code execution is possible.
Risk Scores
CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | openssl | 0, 0, 0 |
| Debian:13 | openssl | 0, 0, 0 |
| Debian:14 | openssl | 0, 0, 0 |
| Debian:11 | openssl | 0, 0, 0 |
Timeline
- Sep 27, 2007 CVE Published
- Apr 28, 2026 CVE Updated