NVD

Id
1620  
Name
CVE-2008-1678  
Description
Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server mod_ssl that specify a compression algorithm.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-07-10  
Modified Date
2011-04-20  
Seq
2008-1678  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
10506 1620 CVE-2008-1678 http://bugs.gentoo.org/show_bug.cgi?id=222643  View
10507 1620 CVE-2008-1678 APPLE-SA-2008-10-09  View
10508 1620 CVE-2008-1678 SUSE-SR:2008:024  View
10509 1620 CVE-2008-1678 [openssl-dev] 20080512 possible memory leak in zlib compression  View
10510 1620 CVE-2008-1678 oval:org.mitre.oval:def:9754  View
10511 1620 CVE-2008-1678 GLSA-200807-06  View
10512 1620 CVE-2008-1678 3981  View
10513 1620 CVE-2008-1678 SSA:2010-060-02  View
10514 1620 CVE-2008-1678 http://support.apple.com/kb/HT3216  View
10515 1620 CVE-2008-1678 http://svn.apache.org/viewvc?view=rev&revision=654119  View
10516 1620 CVE-2008-1678 MDVSA-2009:124  View
10517 1620 CVE-2008-1678 RHSA-2009:1075  View
10518 1620 CVE-2008-1678 31681  View
10519 1620 CVE-2008-1678 31692  View
10520 1620 CVE-2008-1678 USN-731-1  View
10521 1620 CVE-2008-1678 ADV-2008-2780  View
10522 1620 CVE-2008-1678 openssl-libssl-dos(43948)  View
10523 1620 CVE-2008-1678 https://bugs.edge.launchpad.net/bugs/186339  View
10524 1620 CVE-2008-1678 https://bugs.edge.launchpad.net/bugs/224945  View
10525 1620 CVE-2008-1678 https://bugzilla.redhat.com/show_bug.cgi?id=447268  View
10526 1620 CVE-2008-1678 https://issues.apache.org/bugzilla/show_bug.cgi?id=44975  View
10527 1620 CVE-2008-1678 https://kb.bluecoat.com/index?page=content&id=SA50  View
10528 1620 CVE-2008-1678 FEDORA-2008-6393  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46497 JVNDB-2008-001807 OpenSSL の zlib_stateful_init 関数におけるサービス運用妨害 (DoS) の脆弱性 OpenSSL の libssl における crypto/comp/c_zlib.c の zlib_stateful_init 関数には、多数の呼び出しに対する処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-1678 31791 CVE-2008-1678 1620 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001807.html 2008-07-10 2010-03-12 View