CVE-2006-4343: Null Pointer Dereference
The getserverhello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4343?
CVE-2006-4343 is classified as a moderate severity vulnerability that can cause a denial of service through client crashes.
How do I fix CVE-2006-4343?
To fix CVE-2006-4343, update your OpenSSL library to version 0.9.7l, 0.9.8d, or later.
Which versions of OpenSSL are affected by CVE-2006-4343?
CVE-2006-4343 affects OpenSSL versions 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d.
What impact does CVE-2006-4343 have on systems?
The primary impact of CVE-2006-4343 is the potential for remote servers to crash clients using vulnerable versions of OpenSSL.
Is CVE-2006-4343 specific to any operating system?
CVE-2006-4343 affects OpenSSL libraries on various operating systems, including Debian and Ubuntu.