Deskripsi CVE

Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	10		AV:N/AC:L/Au:N/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Openssl>>Openssl >> Version 0.9.7

Openssl>>Openssl >> Version 0.9.7a

Openssl>>Openssl >> Version 0.9.7b

Openssl>>Openssl >> Version 0.9.7c

Openssl>>Openssl >> Version 0.9.7d

Openssl>>Openssl >> Version 0.9.7e

Openssl>>Openssl >> Version 0.9.7f

Openssl>>Openssl >> Version 0.9.7g

Openssl>>Openssl >> Version 0.9.7h

Openssl>>Openssl >> Version 0.9.7i

Openssl>>Openssl >> Version 0.9.7j

Openssl>>Openssl >> Version 0.9.7k

Openssl>>Openssl >> Version 0.9.8

Openssl>>Openssl >> Version 0.9.8a

Openssl>>Openssl >> Version 0.9.8b

Openssl>>Openssl >> Version 0.9.8c

Referensi

http://www.mandriva.com/security/advisories?name=MDKSA-2006:172
Tags : vendor-advisory, x_refsource_MANDRIVA

http://secunia.com/advisories/22212
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2006/4750
Tags : vdb-entry, x_refsource_VUPEN

http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/23915
Tags : third-party-advisory, x_refsource_SECUNIA

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771
Tags : vendor-advisory, x_refsource_HP

http://securitytracker.com/id?1016943
Tags : vdb-entry, x_refsource_SECTRACK

http://secunia.com/advisories/23038
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.trustix.org/errata/2006/0054
Tags : vendor-advisory, x_refsource_TRUSTIX

http://www.debian.org/security/2006/dsa-1195
Tags : vendor-advisory, x_refsource_DEBIAN

http://secunia.com/advisories/23309
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2006/4401
Tags : vdb-entry, x_refsource_VUPEN

http://www.ubuntu.com/usn/usn-353-1
Tags : vendor-advisory, x_refsource_UBUNTU

http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/22116
Tags : third-party-advisory, x_refsource_SECUNIA

https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144
Tags : vendor-advisory, x_refsource_HP

http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm
Tags : x_refsource_CONFIRM

http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://www.kb.cert.org/vuls/id/547300
Tags : third-party-advisory, x_refsource_CERT-VN

http://secunia.com/advisories/22166
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.redhat.com/support/errata/RHSA-2006-0695.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/23340
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2006/4314
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/22385
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.novell.com/linux/security/advisories/2006_24_sr.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/22758
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22487
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.novell.com/linux/security/advisories/2006_58_openssl.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/22772
Tags : third-party-advisory, x_refsource_SECUNIA

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/22165
Tags : third-party-advisory, x_refsource_SECUNIA

http://docs.info.apple.com/article.html?artnum=304829
Tags : x_refsource_CONFIRM

http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html
Tags : mailing-list, x_refsource_FULLDISC

http://secunia.com/advisories/23794
Tags : third-party-advisory, x_refsource_SECUNIA

http://marc.info/?l=bugtraq&m=130497311408250&w=2
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/22220
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/23680
Tags : third-party-advisory, x_refsource_SECUNIA

http://openvpn.net/changelog.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/25889
Tags : third-party-advisory, x_refsource_SECUNIA

http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=498093&RenditionID=&poid=8881
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2006/4036
Tags : vdb-entry, x_refsource_VUPEN

http://openbsd.org/errata.html#openssl2
Tags : vendor-advisory, x_refsource_OPENBSD

http://secunia.com/advisories/30124
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22626
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/bid/22083
Tags : vdb-entry, x_refsource_BID

http://www.mandriva.com/security/advisories?name=MDKSA-2006:178
Tags : vendor-advisory, x_refsource_MANDRIVA

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9370
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.vupen.com/english/advisories/2006/3869
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/22544
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22298
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22130
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/31492
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22284
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/24930
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.redhat.com/support/errata/RHSA-2008-0629.html
Tags : vendor-advisory, x_refsource_REDHAT

http://security.gentoo.org/glsa/glsa-200610-11.xml
Tags : vendor-advisory, x_refsource_GENTOO

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4256
Tags : vdb-entry, signature, x_refsource_OVAL

http://issues.rpath.com/browse/RPL-613
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/26329
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22260
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf
Tags : x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/29237
Tags : vdb-entry, x_refsource_XF

http://www.vupen.com/english/advisories/2007/0343
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2006/3860
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/23280
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/archive/1/447318/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144
Tags : vendor-advisory, x_refsource_HP

http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2006/4264
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/22193
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.osvdb.org/29262
Tags : vdb-entry, x_refsource_OSVDB

http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/23155
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22799
Tags : third-party-advisory, x_refsource_SECUNIA

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946
Tags : vendor-advisory, x_refsource_SLACKWARE

http://www.vupen.com/english/advisories/2006/4417
Tags : vdb-entry, x_refsource_VUPEN

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540
Tags : vendor-advisory, x_refsource_HP

http://marc.info/?l=bugtraq&m=130497311408250&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.serv-u.com/releasenotes/
Tags : x_refsource_CONFIRM

http://www.securityfocus.com/bid/20249
Tags : vdb-entry, x_refsource_BID

http://www.vupen.com/english/advisories/2006/4443
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/30161
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html
Tags : x_refsource_CONFIRM

http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html
Tags : x_refsource_CONFIRM

http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://secunia.com/advisories/22094
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22186
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22633
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.openssl.org/news/secadv_20060928.txt
Tags : x_refsource_CONFIRM

http://kolab.org/security/kolab-vendor-notice-11.txt
Tags : x_refsource_CONFIRM

http://www.vupen.com/english/advisories/2007/2315
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/22500
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
Tags : vendor-advisory, x_refsource_APPLE

http://www.us-cert.gov/cas/techalerts/TA06-333A.html
Tags : third-party-advisory, x_refsource_CERT

http://secunia.com/advisories/22216
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2006/3820
Tags : vdb-entry, x_refsource_VUPEN

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100
Tags : vendor-advisory, x_refsource_HP

http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html
Tags : vendor-advisory, x_refsource_OPENPKG

http://secunia.com/advisories/22654
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2007/1401
Tags : vdb-entry, x_refsource_VUPEN

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102711-1
Tags : vendor-advisory, x_refsource_SUNALERT

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc
Tags : vendor-advisory, x_refsource_NETBSD

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771
Tags : vendor-advisory, x_refsource_HP

http://www.securityfocus.com/archive/1/456546/100/200/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.securityfocus.com/archive/1/447393/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://www.vupen.com/english/advisories/2006/3936
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/22240
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22330
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html
Tags : x_refsource_CONFIRM

https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144
Tags : vendor-advisory, x_refsource_HP

http://www.debian.org/security/2006/dsa-1185
Tags : vendor-advisory, x_refsource_DEBIAN

ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
Tags : vendor-advisory, x_refsource_SGI

http://secunia.com/advisories/22207
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mandriva.com/security/advisories?name=MDKSA-2006:177
Tags : vendor-advisory, x_refsource_MANDRIVA

http://securitytracker.com/id?1017522
Tags : vdb-entry, x_refsource_SECTRACK

http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html
Tags : vendor-advisory, x_refsource_CISCO

http://www.vupen.com/english/advisories/2006/3902
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2007/2783
Tags : vdb-entry, x_refsource_VUPEN

http://www.securityfocus.com/archive/1/470460/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://secunia.com/advisories/22259
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22460
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22791
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/22172
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html
Tags : x_refsource_CONFIRM

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100
Tags : vendor-advisory, x_refsource_HP

http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc
Tags : vendor-advisory, x_refsource_FREEBSD

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml
Tags : vendor-advisory, x_refsource_CISCO

http://secunia.com/advisories/24950
Tags : third-party-advisory, x_refsource_SECUNIA

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201531-1
Tags : vendor-advisory, x_refsource_SUNALERT

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	24.19%	–	–
2022-04-03	–	–	24.19%	–	–
2023-03-12	–	–	–	96.88%	–
2023-05-07	–	–	–	96.88%	–
2023-06-25	–	–	–	96.76%	–
2023-08-06	–	–	–	96.66%	–
2023-09-10	–	–	–	96.25%	–
2024-02-25	–	–	–	96.41%	–
2024-06-02	–	–	–	96.41%	–
2024-12-22	–	–	–	96.57%	–
2025-01-19	–	–	–	96.57%	–
2025-03-18	–	–	–	–	73.11%
2025-05-17	–	–	–	–	73.38%
2025-05-21	–	–	–	–	66.12%
2025-07-16	–	–	–	–	73.38%
2025-07-21	–	–	–	–	70.59%
2025-07-30	–	–	–	–	67.23%
2025-08-31	–	–	–	–	67.23%
2025-10-01	–	–	–	–	34.76%
2025-10-27	–	–	–	–	30.53%
2025-10-28	–	–	–	–	34.76%
2025-11-15	–	–	–	–	32.33%
2025-12-11	–	–	–	–	35.99%
2025-12-17	–	–	–	–	32.33%
2025-12-27	–	–	–	–	28.23%
2025-12-28	–	–	–	–	32.33%
2026-02-22	–	–	–	–	53.74%
2026-03-22	–	–	–	–	54.31%
2026-03-29	–	–	–	–	53.74%

Tanggal	Persentil
2022-02-06	95%
2022-04-03	97%
2023-03-12	99%
2023-05-07	1%
2023-06-25	99%
2023-08-06	99%
2023-09-10	99%
2024-02-25	1%
2024-06-02	1%
2024-12-22	1%
2025-01-19	1%
2025-03-18	99%
2025-05-17	99%
2025-05-21	98%
2025-07-16	99%
2025-07-21	99%
2025-07-30	98%
2025-08-31	99%
2025-10-01	97%
2025-10-27	97%
2025-10-28	97%
2025-11-15	97%
2025-12-11	97%
2025-12-17	97%
2025-12-27	96%
2025-12-28	97%
2026-02-22	98%
2026-03-22	98%
2026-03-29	98%

CVE-2006-3738 : Detail

CVE-2006-3738

Deskripsi CVE

Informasi CVE

Kelemahan Terkait

Metrik

EPSS

Skor EPSS

Persentil EPSS

Produk yang Disebutkan

Konfigurasi 0

Referensi