CVE-2008-0226

high · 7.5

Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.

7.5

CVSS

91.6%

EPSS (exploit prob.)

100th

EPSS percentile

2008-01-10

Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
yassl	yassl	<= 1.7.5
mysql	mysql	5.0.0
mysql	mysql	5.0.1
mysql	mysql	5.0.2
mysql	mysql	5.0.3
mysql	mysql	5.0.4
mysql	mysql	5.0.5
mysql	mysql	5.0.10
mysql	mysql	5.0.15
mysql	mysql	5.0.16
mysql	mysql	5.0.17
mysql	mysql	5.0.20
mysql	mysql	5.0.24
mysql	mysql	5.0.30
mysql	mysql	5.0.36
mysql	mysql	5.0.44
mysql	mysql	5.0.54
mysql	mysql	5.0.56
mysql	mysql	5.0.60
mysql	mysql	5.0.66
mysql	mysql	5.1.5
oracle	mysql	5.0.23
oracle	mysql	5.0.25
oracle	mysql	5.0.26
oracle	mysql	5.0.28
oracle	mysql	5.0.30
oracle	mysql	5.0.32
oracle	mysql	5.0.34
oracle	mysql	5.0.36
oracle	mysql	5.0.38
oracle	mysql	5.0.40
oracle	mysql	5.0.41
oracle	mysql	5.0.42
oracle	mysql	5.0.44
oracle	mysql	5.0.45
oracle	mysql	5.0.46
oracle	mysql	5.0.48
oracle	mysql	5.0.50
oracle	mysql	5.0.50
oracle	mysql	5.0.51

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-0226