Yassl

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Yassl records in CISA KEV

No Yassl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cyassl 4 records LOW Yassl 3 records HIGH Yasslews 1 record MEDIUM

Records

3 records in Yassl · all components

TI-2008-00208 CVE-2008-0226 · GHSA-62p8-jm49-f9f2

Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other…

HIGH 76

Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "inp…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.91602 Published 2008-01-10 No fix listed CWE-119

TI-2005-03525 CVE-2005-3731 · GHSA-mj8v-f3vj-hc7p

Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors…

MEDIUM 45

Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors, related to "certificate chain processing."

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01248 Published 2005-11-21 No fix listed

TI-2008-00209 CVE-2008-0227 · GHSA-38hh-r6wr-38f6

yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote…

LOW 38

yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote attackers to cause a denial of service (crash) via a Hello packet containing a large size value, which triggers a buffer over-read in t…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02492 Published 2008-01-10 No fix listed CWE-119

Open these records in search →

Critical	1
High	3
Medium	4
Low	0
No CVSS	0