Deskripsi CVE

OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-399	Category : Resource Management Errors Weaknesses in this category are related to improper management of system resources.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	7.8		AV:N/AC:L/Au:N/C:N/I:N/A:C	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Openssl>>Openssl >> Version 0.9.7

Openssl>>Openssl >> Version 0.9.7a

Openssl>>Openssl >> Version 0.9.7b

Openssl>>Openssl >> Version 0.9.7c

Openssl>>Openssl >> Version 0.9.7d

Openssl>>Openssl >> Version 0.9.7e

Openssl>>Openssl >> Version 0.9.7f

Openssl>>Openssl >> Version 0.9.7g

Openssl>>Openssl >> Version 0.9.7h

Openssl>>Openssl >> Version 0.9.7i

Openssl>>Openssl >> Version 0.9.7j

Openssl>>Openssl >> Version 0.9.7k

Openssl>>Openssl >> Version 0.9.8

Openssl>>Openssl >> Version 0.9.8a

Openssl>>Openssl >> Version 0.9.8b

Openssl>>Openssl >> Version 0.9.8c

Referensi

http://www.mandriva.com/security/advisories?name=MDKSA-2006:172
Tags : vendor-advisory, x_refsource_MANDRIVA

http://secunia.com/advisories/22212
Tags : third-party-advisory, x_refsource_SECUNIA

http://support.attachmate.com/techdocs/2374.html
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2006/4750
Tags : vdb-entry, x_refsource_VUPEN

http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/23915
Tags : third-party-advisory, x_refsource_SECUNIA

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201534-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771
Tags : vendor-advisory, x_refsource_HP

http://securitytracker.com/id?1016943
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/23038
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.trustix.org/errata/2006/0054
Tags : vendor-advisory, x_refsource_TRUSTIX

http://secunia.com/advisories/23309
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2006/4401
Tags : vdb-entry, x_refsource_VUPEN

http://www.ubuntu.com/usn/usn-353-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/22116
Tags : third-party-advisory, x_refsource_SECUNIA

https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144
Tags : vendor-advisory, x_refsource_HP

http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm
Tags : x_refsource_CONFIRM

http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://secunia.com/advisories/22166
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.redhat.com/support/errata/RHSA-2006-0695.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/23340
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22385
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.novell.com/linux/security/advisories/2006_24_sr.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/22758
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22487
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.novell.com/linux/security/advisories/2006_58_openssl.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/22772
Tags : third-party-advisory, x_refsource_SECUNIA

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/31531
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf
Tags : x_refsource_CONFIRM

http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc
Tags : vendor-advisory, x_refsource_FREEBSD

http://secunia.com/advisories/22165
Tags : third-party-advisory, x_refsource_SECUNIA

http://docs.info.apple.com/article.html?artnum=304829
Tags : x_refsource_CONFIRM

http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html
Tags : mailing-list, x_refsource_FULLDISC

http://marc.info/?l=bugtraq&m=130497311408250&w=2
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/22220
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/23680
Tags : third-party-advisory, x_refsource_SECUNIA

http://openvpn.net/changelog.html
Tags : x_refsource_CONFIRM

http://www.vmware.com/support/server/doc/releasenotes_server.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/25889
Tags : third-party-advisory, x_refsource_SECUNIA

https://exchange.xforce.ibmcloud.com/vulnerabilities/29228
Tags : vdb-entry, x_refsource_XF

http://www.vupen.com/english/advisories/2006/4036
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2006/4019
Tags : vdb-entry, x_refsource_VUPEN

http://openbsd.org/errata.html#openssl2
Tags : vendor-advisory, x_refsource_OPENBSD

http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/30124
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22626
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mandriva.com/security/advisories?name=MDKSA-2006:178
Tags : vendor-advisory, x_refsource_MANDRIVA

http://secunia.com/advisories/23351
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2006/3869
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/22671
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/bid/20248
Tags : vdb-entry, x_refsource_BID

http://secunia.com/advisories/22544
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22298
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vmware.com/support/player2/doc/releasenotes_player2.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/22130
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/31492
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2006/4329
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/22284
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/24930
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2006/4327
Tags : vdb-entry, x_refsource_VUPEN

http://www.redhat.com/support/errata/RHSA-2008-0629.html
Tags : vendor-advisory, x_refsource_REDHAT

http://security.gentoo.org/glsa/glsa-200610-11.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://secunia.com/advisories/23131
Tags : third-party-advisory, x_refsource_SECUNIA

http://issues.rpath.com/browse/RPL-613
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/26329
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22260
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2007/0343
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2006/3860
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/23280
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/archive/1/447318/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144
Tags : vendor-advisory, x_refsource_HP

http://www.vmware.com/support/player/doc/releasenotes_player.html
Tags : x_refsource_CONFIRM

http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm
Tags : x_refsource_CONFIRM

http://www.f-secure.com/security/fsc-2006-6.shtml
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2006/4264
Tags : vdb-entry, x_refsource_VUPEN

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/22193
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2008/2396
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2006/4761
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/23155
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22799
Tags : third-party-advisory, x_refsource_SECUNIA

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946
Tags : vendor-advisory, x_refsource_SLACKWARE

http://www.vupen.com/english/advisories/2006/4417
Tags : vdb-entry, x_refsource_VUPEN

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540
Tags : vendor-advisory, x_refsource_HP

http://marc.info/?l=bugtraq&m=130497311408250&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.serv-u.com/releasenotes/
Tags : x_refsource_CONFIRM

http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html
Tags : x_refsource_CONFIRM

http://www.osvdb.org/29260
Tags : vdb-entry, x_refsource_OSVDB

http://marc.info/?l=bind-announce&m=116253119512445&w=2
Tags : mailing-list, x_refsource_MLIST

http://secunia.com/advisories/22094
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22186
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.openssl.org/news/secadv_20060928.txt
Tags : x_refsource_CONFIRM

http://kolab.org/security/kolab-vendor-notice-11.txt
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2007/2315
Tags : vdb-entry, x_refsource_VUPEN

http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
Tags : vendor-advisory, x_refsource_APPLE

http://www.us-cert.gov/cas/techalerts/TA06-333A.html
Tags : third-party-advisory, x_refsource_CERT

http://www.securityfocus.com/archive/1/489739/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://secunia.com/advisories/22216
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2006/3820
Tags : vdb-entry, x_refsource_VUPEN

http://lists.vmware.com/pipermail/security-announce/2008/000008.html
Tags : mailing-list, x_refsource_MLIST

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100
Tags : vendor-advisory, x_refsource_HP

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10560
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html
Tags : vendor-advisory, x_refsource_OPENPKG

http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
Tags : x_refsource_CONFIRM

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.kb.cert.org/vuls/id/247744
Tags : third-party-advisory, x_refsource_CERT-VN

http://www.vupen.com/english/advisories/2008/0905/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2007/1401
Tags : vdb-entry, x_refsource_VUPEN

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc
Tags : vendor-advisory, x_refsource_NETBSD

http://www.vmware.com/security/advisories/VMSA-2008-0005.html
Tags : x_refsource_CONFIRM

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771
Tags : vendor-advisory, x_refsource_HP

http://www.securityfocus.com/archive/1/456546/100/200/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.securityfocus.com/archive/1/447393/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.vupen.com/english/advisories/2006/3936
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2006/4980
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/22240
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22330
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
Tags : x_refsource_CONFIRM

https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144
Tags : vendor-advisory, x_refsource_HP

http://www.debian.org/security/2006/dsa-1185
Tags : vendor-advisory, x_refsource_DEBIAN

ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
Tags : vendor-advisory, x_refsource_SGI

http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/22207
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mandriva.com/security/advisories?name=MDKSA-2006:177
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html
Tags : vendor-advisory, x_refsource_CISCO

http://www.vupen.com/english/advisories/2006/3902
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2007/2783
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/22259
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22460
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22172
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html
Tags : x_refsource_CONFIRM

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100
Tags : vendor-advisory, x_refsource_HP

http://www.securityfocus.com/bid/28276
Tags : vdb-entry, x_refsource_BID

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml
Tags : vendor-advisory, x_refsource_CISCO

http://secunia.com/advisories/24950
Tags : third-party-advisory, x_refsource_SECUNIA

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	34.5%	–	–
2022-04-03	–	–	34.5%	–	–
2023-03-12	–	–	–	15.31%	–
2023-06-25	–	–	–	20.06%	–
2023-08-06	–	–	–	18.64%	–
2023-09-10	–	–	–	13.56%	–
2023-11-26	–	–	–	10.85%	–
2024-02-25	–	–	–	14.58%	–
2024-06-02	–	–	–	14.58%	–
2024-12-22	–	–	–	21.5%	–
2025-01-19	–	–	–	21.5%	–
2025-02-02	–	–	–	21.5%	–
2025-02-02	–	–	–	21.5%	–
2025-03-18	–	–	–	–	9.51%
2025-03-30	–	–	–	–	7.49%
2025-05-17	–	–	–	–	7.63%
2025-07-16	–	–	–	–	4.66%
2025-07-21	–	–	–	–	5.84%
2025-07-30	–	–	–	–	6.37%
2025-10-01	–	–	–	–	5.75%
2025-10-27	–	–	–	–	6.28%
2025-10-28	–	–	–	–	5.75%
2025-11-15	–	–	–	–	8.84%
2025-12-27	–	–	–	–	9.6%
2025-12-28	–	–	–	–	8.84%
2026-03-22	–	–	–	–	5.24%
2026-03-29	–	–	–	–	5.11%

Tanggal	Persentil
2022-02-06	97%
2022-04-03	98%
2023-03-12	95%
2023-06-25	96%
2023-08-06	96%
2023-09-10	95%
2023-11-26	95%
2024-02-25	96%
2024-06-02	96%
2024-12-22	96%
2025-01-19	96%
2025-02-02	97%
2025-02-02	97%
2025-03-18	92%
2025-03-30	91%
2025-05-17	91%
2025-07-16	89%
2025-07-21	9%
2025-07-30	91%
2025-10-01	9%
2025-10-27	91%
2025-10-28	9%
2025-11-15	92%
2025-12-27	93%
2025-12-28	92%
2026-03-22	9%
2026-03-29	9%

CVE-2006-2937 : Detail

CVE-2006-2937

Deskripsi CVE

Informasi CVE

Kelemahan Terkait

Metrik

EPSS

Skor EPSS

Persentil EPSS

Produk yang Disebutkan

Konfigurasi 0

Referensi