MySQL.yaSSL.Buffer.Overflow

Description

This indicates an attack attempt to exploit a buffer-overflow vulnerability in the MySQL yaSSL module.
The vulnerability is caused due to improper handling of specially crafted packets which could lead to execution of arbitrary code or denial of service to target system.

Affected Products

MySQL yaSSL version 1.7.5 and earlier.

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.
Denial of Service: Remote attackers can crash vulnerable systems.

Recommended Actions

Allow access by trusted users only to SSL servers using yaSSL.

References