Vulnerabilities

TI-2008-00209 CVE-2008-0227 · GHSA-38hh-r6wr-38f6

yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote…

LOW 38

yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote attackers to cause a denial of service (crash) via a Hello packet containing a large size value, which triggers a buffer over-read in t…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02492 Published 2008-01-10 No fix listed CWE-119

TI-2008-00208 CVE-2008-0226 · GHSA-62p8-jm49-f9f2

Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other…

HIGH 76

Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "inp…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.91602 Published 2008-01-10 No fix listed CWE-119

TI-2005-03525 CVE-2005-3731 · GHSA-mj8v-f3vj-hc7p

Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors…

MEDIUM 45

Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors, related to "certificate chain processing."

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01248 Published 2005-11-21 No fix listed

Vulnerabilities

Filters

yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote…

Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other…

Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors…