Description
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | openssl +2 | 0.9.7a-33.4 | RHSA-2004:120 |
| RHEL 3 | openssl096b | 0.9.6b-16 | RHSA-2004:120 |
Advisories 2
- RHSA-2004:120 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-465 openssl - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- 9899 vdb-entry
- FEDORA-2005-1042 vendor-advisory
- ESA-20040317-003 vendor-advisory
- SSRT4717 vendor-advisory
- RHSA-2004:121 vendor-advisory
- MDKSA-2004:023 vendor-advisory
- oval:org.mitre.oval:def:2621 vdb-entry signature
- CLA-2004:834 vendor-advisory
- 17381 third-party-advisory
- http://www.uniras.gov.uk/vuls/2004/224012/index.htm
- FEDORA-2004-095 vendor-advisory
- oval:org.mitre.oval:def:9779 vdb-entry signature
- oval:org.mitre.oval:def:975 vdb-entry signature
- 57524 vendor-advisory
- SuSE-SA:2004:007 vendor-advisory
- http://lists.apple.com/mhonarc/security-announce/msg00045.html
- http://www.openssl.org/news/secadv_20040317.txt
- O-101 third-party-advisory government-resource
- TA04-078A third-party-advisory
- 17401 third-party-advisory
- RHSA-2005:829 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2005-239.htm
- oval:org.mitre.oval:def:870 vdb-entry signature
- RHSA-2005:830 vendor-advisory
- GLSA-200403-03 vendor-advisory
- 11139 third-party-advisory
- RHSA-2004:120 vendor-advisory
- 20040317 New OpenSSL releases fix denial of service attacks [17 March 2004] mailing-list
- http://support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US
- APPLE-SA-2005-08-15 vendor-advisory
- 17398 third-party-advisory
- SSA:2004-077 vendor-advisory
- RHSA-2004:139 vendor-advisory
- openssl-dochangecipherspec-dos(15505) vdb-entry
- 2004-0012 vendor-advisory
- 20040317 Cisco OpenSSL Implementation Vulnerability vendor-advisory
- http://docs.info.apple.com/article.html?artnum=61798
- VU#288574 third-party-advisory
- DSA-465 vendor-advisory
- APPLE-SA-2005-08-17 vendor-advisory
- 18247 third-party-advisory
- oval:org.mitre.oval:def:5770 vdb-entry signature