CVEvulnerability

CVE-2008-1678

5.0 MEDIUM Published 2008-07-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-07-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-399

Description

Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server mod_ssl that specify a compression algorithm.

Affected configurations

• openssl openssl 0.9.8f • openssl openssl 0.9.8g • openssl openssl 0.9.8h

Related

Weakness · not in database (1)

References