CVE-2007-5135: Medium severity OpenSSL OpenSSL vulnerability

Published Sep 27, 2007

Updated

Off-by-one error in the SSLgetsharedciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738. As of 20071012, it is unknown whether code execution is possible.

Affected Software

26 affected components

OpenSSL OpenSSL=0.9.7

OpenSSL OpenSSL=0.9.7-beta1

OpenSSL OpenSSL=0.9.7-beta2

OpenSSL OpenSSL=0.9.7-beta3

OpenSSL OpenSSL=0.9.7-beta4

OpenSSL OpenSSL=0.9.7-beta5

OpenSSL OpenSSL=0.9.7-beta6

OpenSSL OpenSSL=0.9.7a

OpenSSL OpenSSL=0.9.7b

OpenSSL OpenSSL=0.9.7c

OpenSSL OpenSSL=0.9.7d

OpenSSL OpenSSL=0.9.7e

OpenSSL OpenSSL=0.9.7f

OpenSSL OpenSSL=0.9.7g

OpenSSL OpenSSL=0.9.7h

OpenSSL OpenSSL=0.9.7i

OpenSSL OpenSSL=0.9.7j

OpenSSL OpenSSL=0.9.7k

OpenSSL OpenSSL=0.9.7l

OpenSSL OpenSSL=0.9.8

OpenSSL OpenSSL=0.9.8a

OpenSSL OpenSSL=0.9.8b

OpenSSL OpenSSL=0.9.8c

OpenSSL OpenSSL=0.9.8d

OpenSSL OpenSSL=0.9.8e

OpenSSL OpenSSL=0.9.8f

Event History

Sep 27, 2007

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5135?

CVE-2007-5135 is considered critical due to the potential for remote code execution.

How do I fix CVE-2007-5135?

To mitigate CVE-2007-5135, upgrade OpenSSL to version 0.9.8g or later.

What versions of OpenSSL are affected by CVE-2007-5135?

OpenSSL versions from 0.9.7 up to 0.9.7l and from 0.9.8 up to 0.9.8f are affected by CVE-2007-5135.

What kind of vulnerability is CVE-2007-5135?

CVE-2007-5135 is an off-by-one error that can lead to a buffer underflow.

Can CVE-2007-5135 be exploited remotely?

Yes, CVE-2007-5135 can be exploited by remote attackers using crafted packets.