Vulnerability Database

296,172

Total vulnerabilities in the database

CVE-2006-2937

OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.

  • Published: Sep 28, 2006
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-2937
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.8
  • AV:N/AC:L/Au:N/C:N/I:N/A:C

CWEs:

Software From Fixed in
openssl / openssl 0.9.8b 0.9.8b.x
openssl / openssl 0.9.8c 0.9.8c.x
openssl / openssl 0.9.7c 0.9.7c.x
openssl / openssl 0.9.7j 0.9.7j.x
openssl / openssl 0.9.7k 0.9.7k.x
openssl / openssl 0.9.7g 0.9.7g.x
openssl / openssl 0.9.7d 0.9.7d.x
openssl / openssl 0.9.7 0.9.7.x
openssl / openssl 0.9.7e 0.9.7e.x
openssl / openssl 0.9.7b 0.9.7b.x
openssl / openssl 0.9.8a 0.9.8a.x
openssl / openssl 0.9.7i 0.9.7i.x
openssl / openssl 0.9.7h 0.9.7h.x
openssl / openssl 0.9.8 0.9.8.x
openssl / openssl 0.9.7a 0.9.7a.x
openssl / openssl 0.9.7f 0.9.7f.x