Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.
| Software | From | Fixed in |
|---|---|---|
| debian / debian_linux | 5.0 | 5.0.x |
| apple / mac_os_x | 10.5.4 | 10.5.4.x |
| oracle / mysql | 5.0.23 | 5.0.23.x |
| oracle / mysql | 5.0.25 | 5.0.25.x |
| oracle / mysql | 5.0.26 | 5.0.26.x |
| oracle / mysql | 5.0.28 | 5.0.28.x |
| oracle / mysql | 5.0.30-sp1 | 5.0.30-sp1.x |
| oracle / mysql | 5.0.32 | 5.0.32.x |
| oracle / mysql | 5.0.34 | 5.0.34.x |
| oracle / mysql | 5.0.36-sp1 | 5.0.36-sp1.x |
| oracle / mysql | 5.0.38 | 5.0.38.x |
| oracle / mysql | 5.0.40 | 5.0.40.x |
| oracle / mysql | 5.0.41 | 5.0.41.x |
| oracle / mysql | 5.0.42 | 5.0.42.x |
| oracle / mysql | 5.0.44-sp1 | 5.0.44-sp1.x |
| oracle / mysql | 5.0.45 | 5.0.45.x |
| oracle / mysql | 5.0.46 | 5.0.46.x |
| oracle / mysql | 5.0.48 | 5.0.48.x |
| oracle / mysql | 5.0.50 | 5.0.50.x |
| oracle / mysql | 5.0.50-sp1 | 5.0.50-sp1.x |
| oracle / mysql | 5.0.51 | 5.0.51.x |
| oracle / mysql | 5.0.52 | 5.0.52.x |
| oracle / mysql | 5.0.56-sp1 | 5.0.56-sp1.x |
| oracle / mysql | 5.0.58 | 5.0.58.x |
| oracle / mysql | 5.0.60-sp1 | 5.0.60-sp1.x |
| oracle / mysql | 5.0.62 | 5.0.62.x |
| oracle / mysql | 5.0.64 | 5.0.64.x |
| oracle / mysql | 5.0.66-sp1 | 5.0.66-sp1.x |
| oracle / mysql | 5.1 | 5.1.x |
| oracle / mysql | 5.1.1 | 5.1.1.x |
| oracle / mysql | 5.1.10 | 5.1.10.x |
| oracle / mysql | 5.1.11 | 5.1.11.x |
| oracle / mysql | 5.1.12 | 5.1.12.x |
| oracle / mysql | 5.1.13 | 5.1.13.x |
| oracle / mysql | 5.1.14 | 5.1.14.x |
| oracle / mysql | 5.1.15 | 5.1.15.x |
| oracle / mysql | 5.1.16 | 5.1.16.x |
| oracle / mysql | 5.1.17 | 5.1.17.x |
| oracle / mysql | 5.1.18 | 5.1.18.x |
| oracle / mysql | 5.1.19 | 5.1.19.x |
| oracle / mysql | 5.1.2 | 5.1.2.x |
| oracle / mysql | 5.1.20 | 5.1.20.x |
| oracle / mysql | 5.1.21 | 5.1.21.x |
| oracle / mysql | 5.1.22 | 5.1.22.x |
| oracle / mysql | 5.1.3 | 5.1.3.x |
| oracle / mysql | 5.1.4 | 5.1.4.x |
| oracle / mysql | 5.1.6 | 5.1.6.x |
| oracle / mysql | 5.1.7 | 5.1.7.x |
| oracle / mysql | 5.1.8 | 5.1.8.x |
| oracle / mysql | 5.1.9 | 5.1.9.x |
| canonical / ubuntu_linux | 6.06 | 6.06.x |
| canonical / ubuntu_linux | 6.10 | 6.10.x |
| canonical / ubuntu_linux | 7.04 | 7.04.x |
| canonical / ubuntu_linux | 7.10 | 7.10.x |
| mysql / mysql | 5.0.0 | 5.0.0.x |
| mysql / mysql | 5.0.1 | 5.0.1.x |
| mysql / mysql | 5.0.10 | 5.0.10.x |
| mysql / mysql | 5.0.15 | 5.0.15.x |
| mysql / mysql | 5.0.16 | 5.0.16.x |
| mysql / mysql | 5.0.17 | 5.0.17.x |
| mysql / mysql | 5.0.2 | 5.0.2.x |
| mysql / mysql | 5.0.20 | 5.0.20.x |
| mysql / mysql | 5.0.24 | 5.0.24.x |
| mysql / mysql | 5.0.3 | 5.0.3.x |
| mysql / mysql | 5.0.30 | 5.0.30.x |
| mysql / mysql | 5.0.36 | 5.0.36.x |
| mysql / mysql | 5.0.4 | 5.0.4.x |
| mysql / mysql | 5.0.44 | 5.0.44.x |
| mysql / mysql | 5.0.5 | 5.0.5.x |
| mysql / mysql | 5.0.54 | 5.0.54.x |
| mysql / mysql | 5.0.56 | 5.0.56.x |
| mysql / mysql | 5.0.60 | 5.0.60.x |
| mysql / mysql | 5.0.66 | 5.0.66.x |
| mysql / mysql | 5.1.5 | 5.1.5.x |
| yassl / yassl | - | 1.7.5.x |