GCVE - cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*

part: a version: 0.9.6b-3 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Openssl (`a2347ff6-ecf5-5d07-93a9-38967e78374c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:gitlab/redhat/openssl`	purl2cpe	2026-06-01 10:12:53.843341

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-0166`	vulnerable	2026-06-08 05:03:02.248181	Details available OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key. Published: 2013-02-08T19:00:00.000Z Updated: 2024-08-06T14:18:09.381Z Open on db.gcve.eu Reference links http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=66e8211c0b1347970096e04b18aa52567c325200 http://rhn.redhat.com/errata/RHSA-2013-0587.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19360 http://secunia.com/advisories/55139 http://www.openssl.org/news/secadv_20130204.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2333`	vulnerable	2026-06-08 05:02:03.682402	Details available Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation. Published: 2012-05-14T22:00:00.000Z Updated: 2024-08-06T19:34:25.869Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/53476 http://secunia.com/advisories/49116 http://marc.info/?l=bugtraq&m=134919053717161&w=2 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html http://secunia.com/advisories/51312	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2110`	vulnerable	2026-06-08 05:00:52.865713	Details available The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key. Published: 2012-04-19T17:00:00.000Z Updated: 2024-08-06T19:26:07.655Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00014.html http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00007.html http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4355`	vulnerable	2026-06-08 04:51:48.182150	Details available Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678. Published: 2010-01-14T19:00:00.000Z Updated: 2024-08-07T07:01:19.955Z Open on db.gcve.eu Reference links http://www.debian.org/security/2010/dsa-1970 http://www.vupen.com/english/advisories/2010/0916 http://cvs.openssl.org/chngview?cn=19167 http://secunia.com/advisories/42724 http://secunia.com/advisories/39461	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1387`	vulnerable	2026-06-08 04:51:22.565432	Details available The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug." Published: 2009-06-04T16:00:00.000Z Updated: 2024-08-07T05:13:25.436Z Open on db.gcve.eu Reference links http://secunia.com/advisories/38794 http://lists.vmware.com/pipermail/security-announce/2010/000082.html http://cvs.openssl.org/chngview?cn=17958 http://secunia.com/advisories/35729 http://security.gentoo.org/glsa/glsa-200912-01.xml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1386`	vulnerable	2026-06-08 04:51:22.564005	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.