CVE-2008-0891: Double Free
Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service (crash) via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0891?
CVE-2008-0891 is rated as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2008-0891?
To fix CVE-2008-0891, upgrade OpenSSL to version 0.9.8h or later where the vulnerability is patched.
Which versions of OpenSSL are affected by CVE-2008-0891?
CVE-2008-0891 affects OpenSSL versions 0.9.8f and 0.9.8g when TLS server name extensions are enabled.
What type of attack does CVE-2008-0891 enable?
CVE-2008-0891 enables remote attackers to crash the server by sending a malformed Client Hello packet.
Is CVE-2008-0891 a known vulnerability?
Yes, CVE-2008-0891 is a known vulnerability that has been documented and reported by several security advisories.