Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2004-0079
7.5
HIGHCVSS v3
Published
November 23, 2004
CVSS v2
5 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
openssl/openssl
GitHubGeneral purpose TLS and crypto library
GitHubGeneral purpose TLS and crypto library= 0.9.6c, = 0.9.6d, = 0.9.6e, = 0.9.6f, = 0.9.6g, = 0.9.6h, = 0.9.6i, = 0.9.6j, = 0.9.6k, = 0.9.7, = 0.9.7a, = 0.9.7b, = 0.9.7c, = 0.9.6-15, = 0.9.6b-3, = 0.9.7a-2NVD
libressl/openbsdGitHubSource code pulled from OpenBSD for LibreSSL - this includes most of the library and supporting code. The place to contribute to this code is via the OpenBSD CVS tree. Please mail patches to [email protected], instead of submitting pull requests, since this tree is often rebased.
GitHubSource code pulled from OpenBSD for LibreSSL - this includes most of the library and supporting code. The place to contribute to this code is via the OpenBSD CVS tree. Please mail patches to [email protected], instead of submitting pull requests, since this tree is often rebased.= 3.3, = 3.4NVD