CVE-2006-4343
N/A
Published: September 28, 2006 at 06:00 PM UTC
Updated: June 16, 2026 at 10:28 PM UTC
3 products affected across 3 vendorsDebian LinuxUbuntu LinuxOpenSSL
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 19%
Description
The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.
Affected
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc
- ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771
- http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100
- http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540
References (131)
Vendor Advisoryx_refsource_NETBSDThird Party Advisory
Source: [email protected]
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.ascVendor Advisoryx_refsource_SGIThird Party Advisory
Source: [email protected]
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.ascx_refsource_CONFIRMThird Party Advisory
Source: [email protected]
http://docs.info.apple.com/article.html?artnum=304829Vendor Advisoryx_refsource_HPBroken Link
Source: [email protected]
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771Vendor Advisoryx_refsource_HPBroken Link
Source: [email protected]
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100Vendor Advisoryx_refsource_HPBroken Link
Source: [email protected]
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540x_refsource_CONFIRMBroken Link
Source: [email protected]
http://kolab.org/security/kolab-vendor-notice-11.txtQuick Info
StatusMODIFIED
CWE
CWE-476
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card