HIGH✓ PATCH🇬🇧 English

CVE-2004-0079

CVSS 7.5v3.1pub. 2004-11-23upd. 2026-04-16

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • 4d Webstar

    APP
    4D
    4.05.25.2.15.2.25.2.35.2.45.35.3.1
  • Apple Mac Os X

    OS
    Apple
    10.3.3
  • Apple Mac Os X Server

    OS
    Apple
    10.3.3
  • Avaya Converged Communications Server

    HW
    Avaya
    2.0
  • Avaya Intuity Audix

    APP
    Avaya
    5.1.46s3210s3400
  • Avaya Sg200

    HW
    Avaya
    4.31.294.4
  • Avaya Sg203

    HW
    Avaya
    4.31.294.4
  • Avaya Sg208

    HW
    Avaya
    4.4
  • Avaya Sg5

    HW
    Avaya
    4.24.34.4
  • Avaya Vsu

    APP
    Avaya
    10000_r2.0.1100_r2.0.12000_r2.0.155005000_r2.0.15x7500_r2.0.1
  • Checkpoint Firewall 1

    APP
    Checkpoint
    2.0next_generation_fp0next_generation_fp1next_generation_fp2
  • Checkpoint Provider 1

    APP
    Checkpoint
    4.1
  • Checkpoint Vpn 1

    APP
    Checkpoint
    next_generation_fp0next_generation_fp1next_generation_fp2vsx_ng_with_application_intelligence
  • Cisco Access Registrar

    APP
    Cisco
    wszystkie wersje
  • Cisco Application And Content Networking Software

    APP
    Cisco
    wszystkie wersje
  • Cisco Ciscoworks Common Management Foundation

    APP
    Cisco
    2.1
  • Cisco Ciscoworks Common Services

    APP
    Cisco
    2.2
  • Cisco Css11000 Content Services Switch

    APP
    Cisco
    wszystkie wersje
  • Cisco Css Secure Content Accelerator

    APP
    Cisco
    1.02.0
  • Cisco Firewall Services Module

    HW
    Cisco
    1.1.21.1.31.1_\(3.005\)2.1_\(0.208\)
  • Cisco IOS

    OS
    Cisco
    12.1\(11b\)e12.1\(11b\)e1212.1\(11b\)e1412.1\(11\)e12.1\(13\)e912.1\(19\)e112.2\(14\)sy12.2\(14\)sy112.2sy12.2za
  • Cisco Okena Stormwatch

    APP
    Cisco
    3.2
  • Cisco Pix Firewall

    APP
    Cisco
    6.2.2_.111
  • Cisco Threat Response

    APP
    Cisco
    wszystkie wersje
  • Cisco Webns

    APP
    Cisco
    6.106.10_b47.107.10_.0.06s7.1_0.1.027.1_0.2.067.2_0.0.03
  • Dell Bsafe Ssl J

    APP
    Dell
    3.03.0.13.1
  • Freebsd

    OS
    Freebsd
    4.84.95.15.25.2.1
  • HP Aaa Server

    HW
    Hp
    wszystkie wersje
  • HP Apache Based Web Server

    HW
    Hp
    2.0.43.002.0.43.04
  • HP Ux

    OS
    Hp
    11.0011.1111.238.05
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2021-40438CRITICAL9.0⚠ KEVten sam produkt

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remot...

CVE-2021-1871CRITICAL9.8⚠ KEVten sam produkt

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Up...

CVE-2021-1870CRITICAL9.8⚠ KEVten sam produkt

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Up...

CVE-2019-5544CRITICAL9.8⚠ KEVten sam produkt

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the s...