CVE-2007-5135

Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute…

published September 27, 2007

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738. As of 20071012, it is unknown whether code execution is possible.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16061 · 96.9th percentile
Published
2007-09-27T20:00Z
EPSS history
Timeline
  • 27 SEP 20:00Z
    Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute…
    cvelistv5