What is CVE-2008-0891?

CVE-2008-0891 is a vulnerability in Openssl, classified under CWE-189. Published 2008-05-29.

Is CVE-2008-0891 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Openssl

CVE-2008-0891

Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service (crash) via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information.

EPSS: 0.046 (90.6th percentile) — read the EPSS interpretation.

Affected products

Openssl — versions 0.9.8f, 0.9.8g
N/a — versions n/a

Weakness classification (CWE)

CWE-189

Public proof-of-concept exploits

References

secalert@redhat.com (x_refsource_MISC)
secalert@redhat.com (vendor-advisory, x_refsource_SLACKWARE)
secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
secalert@redhat.com (x_refsource_MISC)
secalert@redhat.com (vdb-entry, x_refsource_XF)
secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
secalert@redhat.com (vdb-entry, x_refsource_VUPEN)
secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2008-0891?: CVE-2008-0891 is a vulnerability in Openssl, classified under CWE-189. Published 2008-05-29.
Is CVE-2008-0891 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.