Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:openssl:0.9.6b-3:*:i386:*:*:*:*:*

part: a version: 0.9.6b-3 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductOpenssl (a2347ff6-ecf5-5d07-93a9-38967e78374c)
Editioni386
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:gitlab/redhat/openssl purl2cpe 2026-06-01 10:12:53.844538

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-0112 vulnerable 2026-06-08 04:47:48.577294 Details available
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
Published: 2004-03-18T05:00:00.000Z
Updated: 2024-08-08T00:10:03.359Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0081 vulnerable 2026-06-08 04:47:48.457711 Details available
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
Published: 2004-03-18T05:00:00.000Z
Updated: 2024-08-08T00:01:23.650Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0079 vulnerable 2026-06-08 04:47:48.371886 Details available
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Published: 2004-03-18T05:00:00.000Z
Updated: 2025-01-16T17:33:22.869Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.