Intrusion PreventionOpenSSL.Omit.Key.Exchange.DoS
Description
This indicates an attempt to exploit a denial-of-service vulnerability in OpenSSL.
There is a NULL pointer dereference error in the OpenSSL client, which is triggered when a malicious server omits the 'Server Key exchange message' from a TLS handshake.
Affected Products
OpenSSL 0.9.8f and 0.9.8g.
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Update to version 0.9.8h.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
References
http://secunia.com/advisories/30405/| ID | 15628 |
| Created | Jun 10, 2008 |
| Updated | May 02, 2022 |
| Risk |
|
| CVE ID | CVE-2008-1672 |
| Exploit Prediction Score | 4.71% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Other |