CVE - CVE-2006-2937

CVE-ID
CVE-2006-2937	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1016943 URL:http://securitytracker.com/id?1016943 MISC:102668 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1~~ (Obsolete source) MISC:102747 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1~~ (Obsolete source) MISC:200585 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1~~ (Obsolete source) MISC:2006-0054 URL:~~http://www.trustix.org/errata/2006/0054~~ (Obsolete source - check if archived by the Wayback Machine) MISC:20060928 [SECURITY] OpenSSL 0.9.8d and 0.9.7l released URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html MISC:20060928 rPSA-2006-0175-1 openssl openssl-scripts URL:http://www.securityfocus.com/archive/1/447318/100/0/threaded MISC:20060929 rPSA-2006-0175-2 openssl openssl-scripts URL:http://www.securityfocus.com/archive/1/447393/100/0/threaded MISC:20061001-01-P URL:ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc MISC:20061108 Multiple Vulnerabilities in OpenSSL Library URL:http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html MISC:20061108 Multiple Vulnerabilities in OpenSSL library URL:http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml MISC:20070110 VMware ESX server security updates URL:http://www.securityfocus.com/archive/1/456546/100/200/threaded MISC:20080318 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues URL:http://www.securityfocus.com/archive/1/489739/100/0/threaded MISC:201534 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1~~ (Obsolete source) MISC:20248 URL:http://www.securityfocus.com/bid/20248 MISC:22094 URL:http://secunia.com/advisories/22094 MISC:22116 URL:http://secunia.com/advisories/22116 MISC:22130 URL:http://secunia.com/advisories/22130 MISC:22165 URL:http://secunia.com/advisories/22165 MISC:22166 URL:http://secunia.com/advisories/22166 MISC:22172 URL:http://secunia.com/advisories/22172 MISC:22186 URL:http://secunia.com/advisories/22186 MISC:22193 URL:http://secunia.com/advisories/22193 MISC:22207 URL:http://secunia.com/advisories/22207 MISC:22212 URL:http://secunia.com/advisories/22212 MISC:22216 URL:http://secunia.com/advisories/22216 MISC:22220 URL:http://secunia.com/advisories/22220 MISC:22240 URL:http://secunia.com/advisories/22240 MISC:22259 URL:http://secunia.com/advisories/22259 MISC:22260 URL:http://secunia.com/advisories/22260 MISC:22284 URL:http://secunia.com/advisories/22284 MISC:22298 URL:http://secunia.com/advisories/22298 MISC:22330 URL:http://secunia.com/advisories/22330 MISC:22385 URL:http://secunia.com/advisories/22385 MISC:22460 URL:http://secunia.com/advisories/22460 MISC:22487 URL:http://secunia.com/advisories/22487 MISC:22544 URL:http://secunia.com/advisories/22544 MISC:22626 URL:http://secunia.com/advisories/22626 MISC:22671 URL:http://secunia.com/advisories/22671 MISC:22758 URL:http://secunia.com/advisories/22758 MISC:22772 URL:http://secunia.com/advisories/22772 MISC:22799 URL:http://secunia.com/advisories/22799 MISC:23038 URL:http://secunia.com/advisories/23038 MISC:23131 URL:http://secunia.com/advisories/23131 MISC:23155 URL:http://secunia.com/advisories/23155 MISC:23280 URL:http://secunia.com/advisories/23280 MISC:23309 URL:http://secunia.com/advisories/23309 MISC:23340 URL:http://secunia.com/advisories/23340 MISC:23351 URL:http://secunia.com/advisories/23351 MISC:23680 URL:http://secunia.com/advisories/23680 MISC:23915 URL:http://secunia.com/advisories/23915 MISC:24930 URL:http://secunia.com/advisories/24930 MISC:24950 URL:http://secunia.com/advisories/24950 MISC:25889 URL:http://secunia.com/advisories/25889 MISC:26329 URL:http://secunia.com/advisories/26329 MISC:28276 URL:http://www.securityfocus.com/bid/28276 MISC:29260 URL:~~http://www.osvdb.org/29260~~ (Obsolete source) MISC:30124 URL:http://secunia.com/advisories/30124 MISC:31492 URL:http://secunia.com/advisories/31492 MISC:31531 URL:http://secunia.com/advisories/31531 MISC:ADV-2006-3820 URL:~~http://www.vupen.com/english/advisories/2006/3820~~ (Obsolete source) MISC:ADV-2006-3860 URL:~~http://www.vupen.com/english/advisories/2006/3860~~ (Obsolete source) MISC:ADV-2006-3869 URL:~~http://www.vupen.com/english/advisories/2006/3869~~ (Obsolete source) MISC:ADV-2006-3902 URL:~~http://www.vupen.com/english/advisories/2006/3902~~ (Obsolete source) MISC:ADV-2006-3936 URL:~~http://www.vupen.com/english/advisories/2006/3936~~ (Obsolete source) MISC:ADV-2006-4019 URL:~~http://www.vupen.com/english/advisories/2006/4019~~ (Obsolete source) MISC:ADV-2006-4036 URL:~~http://www.vupen.com/english/advisories/2006/4036~~ (Obsolete source) MISC:ADV-2006-4264 URL:~~http://www.vupen.com/english/advisories/2006/4264~~ (Obsolete source) MISC:ADV-2006-4327 URL:~~http://www.vupen.com/english/advisories/2006/4327~~ (Obsolete source) MISC:ADV-2006-4329 URL:~~http://www.vupen.com/english/advisories/2006/4329~~ (Obsolete source) MISC:ADV-2006-4401 URL:~~http://www.vupen.com/english/advisories/2006/4401~~ (Obsolete source) MISC:ADV-2006-4417 URL:~~http://www.vupen.com/english/advisories/2006/4417~~ (Obsolete source) MISC:ADV-2006-4750 URL:~~http://www.vupen.com/english/advisories/2006/4750~~ (Obsolete source) MISC:ADV-2006-4761 URL:~~http://www.vupen.com/english/advisories/2006/4761~~ (Obsolete source) MISC:ADV-2006-4980 URL:~~http://www.vupen.com/english/advisories/2006/4980~~ (Obsolete source) MISC:ADV-2007-0343 URL:~~http://www.vupen.com/english/advisories/2007/0343~~ (Obsolete source) MISC:ADV-2007-1401 URL:~~http://www.vupen.com/english/advisories/2007/1401~~ (Obsolete source) MISC:ADV-2007-2315 URL:~~http://www.vupen.com/english/advisories/2007/2315~~ (Obsolete source) MISC:ADV-2007-2783 URL:~~http://www.vupen.com/english/advisories/2007/2783~~ (Obsolete source) MISC:ADV-2008-0905 URL:~~http://www.vupen.com/english/advisories/2008/0905/references~~ (Obsolete source) MISC:ADV-2008-2396 URL:~~http://www.vupen.com/english/advisories/2008/2396~~ (Obsolete source) MISC:APPLE-SA-2006-11-28 URL:http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html MISC:DSA-1185 URL:http://www.debian.org/security/2006/dsa-1185 MISC:FreeBSD-SA-06:23.openssl URL:http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc MISC:GLSA-200610-11 URL:http://security.gentoo.org/glsa/glsa-200610-11.xml MISC:GLSA-200612-11 URL:http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml MISC:HPSBMA02250 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 MISC:HPSBOV02683 URL:http://marc.info/?l=bugtraq&m=130497311408250&w=2 MISC:HPSBTU02207 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 MISC:HPSBUX02174 URL:http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100 MISC:HPSBUX02186 URL:http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 MISC:MDKSA-2006:172 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:172~~ (Obsolete source) MISC:MDKSA-2006:177 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:177~~ (Obsolete source) MISC:MDKSA-2006:178 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:178~~ (Obsolete source) MISC:NetBSD-SA2008-007 URL:ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc MISC:OpenPKG-SA-2006.021 URL:http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html MISC:RHSA-2006:0695 URL:http://www.redhat.com/support/errata/RHSA-2006-0695.html MISC:RHSA-2008:0629 URL:http://www.redhat.com/support/errata/RHSA-2008-0629.html MISC:SSA:2006-272-01 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946 MISC:SSRT061213 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 MISC:SSRT061239 URL:http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100 MISC:SSRT061275 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 MISC:SSRT071299 URL:http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 MISC:SSRT071304 URL:https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 MISC:SSRT090208 URL:http://marc.info/?l=bugtraq&m=130497311408250&w=2 MISC:SUSE-SA:2006:058 URL:http://www.novell.com/linux/security/advisories/2006_58_openssl.html MISC:SUSE-SR:2006:024 URL:http://www.novell.com/linux/security/advisories/2006_24_sr.html MISC:TA06-333A URL:http://www.us-cert.gov/cas/techalerts/TA06-333A.html MISC:USN-353-1 URL:http://www.ubuntu.com/usn/usn-353-1 MISC:VU#247744 URL:http://www.kb.cert.org/vuls/id/247744 MISC:[3.9] 20061007 013: SECURITY FIX: October 7, 2006 URL:http://openbsd.org/errata.html#openssl2 MISC:[bind-announce] 20061103 Internet Systems Consortium Security Advisory. [revised] URL:http://marc.info/?l=bind-announce&m=116253119512445&w=2 MISC:[security-announce] 20080317 VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues URL:http://lists.vmware.com/pipermail/security-announce/2008/000008.html MISC:http://docs.info.apple.com/article.html?artnum=304829 URL:http://docs.info.apple.com/article.html?artnum=304829 MISC:http://issues.rpath.com/browse/RPL-613 URL:http://issues.rpath.com/browse/RPL-613 MISC:http://kolab.org/security/kolab-vendor-notice-11.txt URL:http://kolab.org/security/kolab-vendor-notice-11.txt MISC:http://openvpn.net/changelog.html URL:http://openvpn.net/changelog.html MISC:http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227 URL:http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227 MISC:http://support.attachmate.com/techdocs/2374.html URL:http://support.attachmate.com/techdocs/2374.html MISC:http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm URL:http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm MISC:http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm URL:http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm MISC:http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf URL:http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf MISC:http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf URL:http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf MISC:http://www.f-secure.com/security/fsc-2006-6.shtml URL:http://www.f-secure.com/security/fsc-2006-6.shtml MISC:http://www.openssl.org/news/secadv_20060928.txt URL:http://www.openssl.org/news/secadv_20060928.txt MISC:http://www.serv-u.com/releasenotes/ URL:http://www.serv-u.com/releasenotes/ MISC:http://www.vmware.com/security/advisories/VMSA-2008-0005.html URL:http://www.vmware.com/security/advisories/VMSA-2008-0005.html MISC:http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html URL:http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html MISC:http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html URL:http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html MISC:http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html URL:http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html MISC:http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html URL:http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html MISC:http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html URL:http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html MISC:http://www.vmware.com/support/player/doc/releasenotes_player.html URL:http://www.vmware.com/support/player/doc/releasenotes_player.html MISC:http://www.vmware.com/support/player2/doc/releasenotes_player2.html URL:http://www.vmware.com/support/player2/doc/releasenotes_player2.html MISC:http://www.vmware.com/support/server/doc/releasenotes_server.html URL:http://www.vmware.com/support/server/doc/releasenotes_server.html MISC:http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html URL:http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html MISC:http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html URL:http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html MISC:http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html URL:http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html MISC:http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html URL:http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html MISC:http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf URL:http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf MISC:openssl-asn1-error-dos(29228) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/29228 MISC:oval:org.mitre.oval:def:10560 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10560
Assigning CNA
Red Hat, Inc.
Date Record Created
20060609	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060609)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)