Unrated severityNVD Advisory· Published Sep 28, 2006· Updated Jun 16, 2026
CVE-2006-2937
CVE-2006-2937
Description
OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*+ 16 more
- cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.7e:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.7f:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.7g:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.7h:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.7i:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*
- (no CPE)range: >=0.9.7 <0.9.7l || >=0.9.8 <0.9.8d
- osv-coords2 versionspkg:rpm/opensuse/openssl-1_0_0&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/openssl-1_1&distro=openSUSE%20Tumbleweed
< 1.0.2u-6.2+ 1 more
- (no CPE)range: < 1.0.2u-6.2
- (no CPE)range: < 1.1.1l-1.2
Patches
Vulnerability mechanics
References
136- kolab.org/security/kolab-vendor-notice-11.txtnvdPatch
- lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.htmlnvdPatch
- openbsd.org/errata.htmlnvdPatch
- openvpn.net/changelog.htmlnvdPatch
- secunia.com/advisories/22094nvdPatchVendor Advisory
- secunia.com/advisories/22116nvdPatchVendor Advisory
- secunia.com/advisories/22130nvdPatchVendor Advisory
- secunia.com/advisories/22165nvdPatchVendor Advisory
- secunia.com/advisories/22166nvdPatchVendor Advisory
- secunia.com/advisories/22172nvdPatchVendor Advisory
- secunia.com/advisories/22186nvdPatchVendor Advisory
- secunia.com/advisories/22193nvdPatchVendor Advisory
- secunia.com/advisories/22207nvdPatchVendor Advisory
- secunia.com/advisories/22212nvdPatchVendor Advisory
- secunia.com/advisories/22216nvdPatchVendor Advisory
- secunia.com/advisories/22220nvdPatchVendor Advisory
- secunia.com/advisories/22240nvdPatchVendor Advisory
- secunia.com/advisories/22259nvdPatchVendor Advisory
- secunia.com/advisories/22260nvdPatchVendor Advisory
- secunia.com/advisories/22284nvdPatchVendor Advisory
- secunia.com/advisories/22330nvdPatchVendor Advisory
- security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.ascnvdPatchVendor Advisory
- securitytracker.com/idnvdPatch
- slackware.com/security/viewer.phpnvdPatch
- sunsolve.sun.com/search/document.donvdPatch
- support.avaya.com/elmodocs2/security/ASA-2006-220.htmnvdPatch
- www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdfnvdPatchVendor Advisory
- www.debian.org/security/2006/dsa-1185nvdPatch
- www.kb.cert.org/vuls/id/247744nvdPatchUS Government Resource
- www.novell.com/linux/security/advisories/2006_24_sr.htmlnvdPatchVendor Advisory
- www.novell.com/linux/security/advisories/2006_58_openssl.htmlnvdPatchVendor Advisory
- www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.htmlnvdPatchVendor Advisory
- www.openssl.org/news/secadv_20060928.txtnvdPatchVendor Advisory
- www.redhat.com/support/errata/RHSA-2006-0695.htmlnvdPatch
- www.securityfocus.com/bid/20248nvdPatch
- www.serv-u.com/releasenotes/nvdPatch
- www.trustix.org/errata/2006/0054nvdPatch
- www.ubuntu.com/usn/usn-353-1nvdPatchVendor Advisory
- secunia.com/advisories/22385nvdVendor Advisory
- secunia.com/advisories/22460nvdVendor Advisory
- secunia.com/advisories/22487nvdVendor Advisory
- secunia.com/advisories/22544nvdVendor Advisory
- secunia.com/advisories/22626nvdVendor Advisory
- secunia.com/advisories/22671nvdVendor Advisory
- www.us-cert.gov/cas/techalerts/TA06-333A.htmlnvdUS Government Resource
- ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.ascnvd
- patches.sgi.com/support/free/security/advisories/20061001-01-P.ascnvd
- docs.info.apple.com/article.htmlnvd
- h20000.www2.hp.com/bizsupport/TechSupport/Document.jspnvd
- issues.rpath.com/browse/RPL-613nvd
- itrc.hp.com/service/cki/docDisplay.donvd
- itrc.hp.com/service/cki/docDisplay.donvd
- lists.apple.com/archives/security-announce/2006/Nov/msg00001.htmlnvd
- lists.vmware.com/pipermail/security-announce/2008/000008.htmlnvd
- marc.infonvd
- marc.infonvd
- secunia.com/advisories/22298nvd
- secunia.com/advisories/22758nvd
- secunia.com/advisories/22772nvd
- secunia.com/advisories/22799nvd
- secunia.com/advisories/23038nvd
- secunia.com/advisories/23131nvd
- secunia.com/advisories/23155nvd
- secunia.com/advisories/23280nvd
- secunia.com/advisories/23309nvd
- secunia.com/advisories/23340nvd
- secunia.com/advisories/23351nvd
- secunia.com/advisories/23680nvd
- secunia.com/advisories/23915nvd
- secunia.com/advisories/24930nvd
- secunia.com/advisories/24950nvd
- secunia.com/advisories/25889nvd
- secunia.com/advisories/26329nvd
- secunia.com/advisories/30124nvd
- secunia.com/advisories/31492nvd
- secunia.com/advisories/31531nvd
- security.gentoo.org/glsa/glsa-200610-11.xmlnvd
- sourceforge.net/project/shownotes.phpnvd
- sunsolve.sun.com/search/document.donvd
- sunsolve.sun.com/search/document.donvd
- sunsolve.sun.com/search/document.donvd
- support.attachmate.com/techdocs/2374.htmlnvd
- support.avaya.com/elmodocs2/security/ASA-2006-260.htmnvd
- www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdfnvd
- www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.htmlnvd
- www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtmlnvd
- www.f-secure.com/security/fsc-2006-6.shtmlnvd
- www.gentoo.org/security/en/glsa/glsa-200612-11.xmlnvd
- www.mandriva.com/security/advisoriesnvd
- www.mandriva.com/security/advisoriesnvd
- www.mandriva.com/security/advisoriesnvd
- www.osvdb.org/29260nvd
- www.redhat.com/support/errata/RHSA-2008-0629.htmlnvd
- www.securityfocus.com/archive/1/447318/100/0/threadednvd
- www.securityfocus.com/archive/1/447393/100/0/threadednvd
- www.securityfocus.com/archive/1/456546/100/200/threadednvd
- www.securityfocus.com/archive/1/489739/100/0/threadednvd
- www.securityfocus.com/bid/28276nvd
- www.vmware.com/security/advisories/VMSA-2008-0005.htmlnvd
- www.vmware.com/support/ace2/doc/releasenotes_ace2.htmlnvd
- www.vmware.com/support/esx2/doc/esx-202-200612-patch.htmlnvd
- www.vmware.com/support/esx21/doc/esx-213-200612-patch.htmlnvd
- www.vmware.com/support/esx25/doc/esx-253-200612-patch.htmlnvd
- www.vmware.com/support/esx25/doc/esx-254-200612-patch.htmlnvd
- www.vmware.com/support/player/doc/releasenotes_player.htmlnvd
- www.vmware.com/support/player2/doc/releasenotes_player2.htmlnvd
- www.vmware.com/support/server/doc/releasenotes_server.htmlnvd
- www.vmware.com/support/vi3/doc/esx-3069097-patch.htmlnvd
- www.vmware.com/support/vi3/doc/esx-9986131-patch.htmlnvd
- www.vmware.com/support/ws55/doc/releasenotes_ws55.htmlnvd
- www.vmware.com/support/ws6/doc/releasenotes_ws6.htmlnvd
- www.vupen.com/english/advisories/2006/3820nvd
- www.vupen.com/english/advisories/2006/3860nvd
- www.vupen.com/english/advisories/2006/3869nvd
- www.vupen.com/english/advisories/2006/3902nvd
- www.vupen.com/english/advisories/2006/3936nvd
- www.vupen.com/english/advisories/2006/4019nvd
- www.vupen.com/english/advisories/2006/4036nvd
- www.vupen.com/english/advisories/2006/4264nvd
- www.vupen.com/english/advisories/2006/4327nvd
- www.vupen.com/english/advisories/2006/4329nvd
- www.vupen.com/english/advisories/2006/4401nvd
- www.vupen.com/english/advisories/2006/4417nvd
- www.vupen.com/english/advisories/2006/4750nvd
- www.vupen.com/english/advisories/2006/4761nvd
- www.vupen.com/english/advisories/2006/4980nvd
- www.vupen.com/english/advisories/2007/0343nvd
- www.vupen.com/english/advisories/2007/1401nvd
- www.vupen.com/english/advisories/2007/2315nvd
- www.vupen.com/english/advisories/2007/2783nvd
- www.vupen.com/english/advisories/2008/0905/referencesnvd
- www.vupen.com/english/advisories/2008/2396nvd
- www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdfnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/29228nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10560nvd
- www2.itrc.hp.com/service/cki/docDisplay.donvd
News mentions
0No linked articles in our index yet.