Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

openssl: off-by-one error

Package(s):

openssl

CVE #(s):

CVE-2007-4995

Created:

October 23, 2007

Updated:

May 13, 2008

Description:

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f and 0.9.7 allows remote attackers to execute arbitrary code via unspecified vectors.

Alerts:

Debian	DSA-1571-1	2008-05-13
Mandriva	MDKSA-2007:237	2007-12-04
Gentoo	200710-30:02	2007-10-27
Ubuntu	USN-534-1	2007-10-22

(Log in to post comments)