CVE-2008-1672

OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses…

published May 29, 2008

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses "particular cipher suites," which triggers a NULL pointer dereference.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05000 · 92.2th percentile
Published
2008-05-29T16:00Z
EPSS history
Timeline
  • 29 MAY 16:00Z
    OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses…
    cvelistv5