Explain CVE-2008-1672
OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses "particular cipher suites," which triggers a NULL pointer dereference.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://cert.fi/haavoittuvuudet/2008/advisory-openssl.html'}, {'name': 'SSA:2008-210-08', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004'}, {'name': '30852', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30852'}, {'name': 'FEDORA-2008-4723', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.html'}, {'name': 'openssl-serverkey-dos(42667)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/42667'}, {'tags': ['x_refsource_MISC'], 'url': 'http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400'}, {'name': '30460', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30460'}, {'name': '30825', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30825'}, {'name': 'ADV-2008-1680', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1680'}, {'name': '20080602 rPSA-2008-0181-1 openssl openssl-scripts', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/492932/100/0/threaded'}, {'name': 'USN-620-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-620-1'}, {'name': '30868', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30868'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openssl.org/news/secadv_20080528.txt'}, {'name': 'GLSA-200806-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200806-08.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=615606'}, {'name': '31288', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/31288'}, {'name': '30405', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30405'}, {'name': '29405', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/29405'}, {'name': '1020122', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1020122'}, {'name': 'ADV-2008-1937', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1937/references'}, {'name': '31228', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/31228'}, {'name': 'MDVSA-2008:107', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2008:107'}, {'name': 'VU#520586', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/520586'}]
CVE State: PUBLISHED