The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Metrics
Affected Vendors & Products
References
History
Wed, 16 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Thu, 16 Jan 2025 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Status: PUBLISHED
Assigner: mitre
Published: 2004-03-18T05:00:00
Updated: 2025-01-16T17:33:22.869Z
Reserved: 2004-01-19T00:00:00
Link: CVE-2004-0079
Updated: 2024-08-08T00:01:23.689Z
Status : Deferred
Published: 2004-11-23T05:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2004-0079