CVE-2006-4343

Publication date 28 September 2006

Last updated 24 July 2024

Ubuntu priority

The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
openssl	7.04 feisty	Fixed 0.9.8b-2ubuntu2
	6.10 edgy	Fixed 0.9.8b-2ubuntu2
	6.06 LTS dapper	Fixed 0.9.8a-7ubuntu0.3
openssl097	7.04 feisty	Fixed 0.9.7k-3
	6.10 edgy	Fixed 0.9.7k-3
	6.06 LTS dapper	Fixed 0.9.7g-5ubuntu1.1

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-353-1
openssl vulnerabilities
29 September 2006

Other references

https://www.cve.org/CVERecord?id=CVE-2006-4343