CVE-2008-1678
CVE-2008-1678
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server mod_ssl that specify a compression algorithm.
EPSS 5.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.redhat.com/support/errata/RHSA-2009-1075.html
- http://secunia.com/advisories/42724
- http://secunia.com/advisories/34219
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43948
- https://bugzilla.redhat.com/show_bug.cgi?id=447268
- http://secunia.com/advisories/31026
- http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049
- http://www.securityfocus.com/bid/31692
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9754
- http://www.securityfocus.com/bid/31681
- https://issues.apache.org/bugzilla/show_bug.cgi?id=44975
- http://secunia.com/advisories/38761
- http://secunia.com/advisories/31416
- http://secunia.com/advisories/44183
- http://www.ubuntu.com/usn/USN-731-1
- http://bugs.gentoo.org/show_bug.cgi?id=222643
- http://secunia.com/advisories/32222
- http://secunia.com/advisories/35264
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:124
- http://svn.apache.org/viewvc?view=rev&revision=654119
- https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00055.html
- http://security.gentoo.org/glsa/glsa-200807-06.xml
- https://nvd.nist.gov/vuln/detail/CVE-2008-1678