Summary
generated automatically from NVD dataOpenSSL's do_change_cipher_spec function, in versions 0.9.6c to 0.9.6k and 0.9.7a to 0.9.7c, contains a null dereference (CWE-476). A remote attacker can send a crafted SSL/TLS handshake to crash the process, causing a denial of service. NVD also lists products such as the Cisco Firewall Services Module, HP Apache-based web server and Avaya SG200 as affected, and rates the flaw 7.5 (HIGH, CVSS v3.1).
NVD description
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
EPSS · FIRST.org
9.5%probability of exploitation in the next 30 days
Higher than 95% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-11-02, recomputed daily by FIRST.org.
CVSS v3.1 Score
Information
- Published
- 23 nov. 2004
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.
Weaknesses (CWE)
References (90)
- http://fedoranews.org/updates/FEDORA-2004-095.shtmlThird Party Advisory
- http://secunia.com/advisories/11139Broken Link
- http://secunia.com/advisories/17381Broken Link
- http://secunia.com/advisories/17398Broken Link
- http://secunia.com/advisories/17401Broken Link
- + 75 more references on NVD
Similar CVEs
Other vulnerabilities of type CWE-476
Know which CVEs hit the versions you run.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.