VULNERABILITY INTELLIGENCE
CVE-2008-0226
CVSS score7.5 HIGH
EPSS probability91.60%
CISA KEVNot currently listed
Published2008-01-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- cve@mitre.org — Permissions Required
- cve@mitre.org — Not Applicable
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Not Applicable
- cve@mitre.org — Not Applicable
- cve@mitre.org — Not Applicable
- cve@mitre.org — Not Applicable
- cve@mitre.org — Not Applicable
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Broken Link