CVE-2008-0891

概要

参考情報

• cert.fi/haavoittuvuudet/2008/advisory-openssl.html
• secunia.com/advisories/30405 · Vendor Advisory
• secunia.com/advisories/30460
• secunia.com/advisories/30825
• secunia.com/advisories/30852
• secunia.com/advisories/30868
• secunia.com/advisories/31228
• secunia.com/advisories/31288
• security.gentoo.org/glsa/glsa-200806-08.xml
• slackware.com/security/viewer.php
• sourceforge.net/project/shownotes.php
• support.nortel.com/go/main.jsp
• kb.cert.org/vuls/id/661475 · US Government Resource
• mandriva.com/security/advisories
• openssl.org/news/secadv_20080528.txt

openssl のその他の脆弱性

• CVE-2026-84784高 7.5Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many co…
• CVE-2026-84783高 7.5Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed whi…
• CVE-2026-84782高 8.2Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The ret…
• CVE-2026-77696低 3.7Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: …
• CVE-2026-75806中 5.3Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose e…