CVE-2008-0226

The record

Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.

Affected packages

Related vulnerabilities

• CVE-2009-4484 Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp… Also affects mysql-dfsg-5.0
• CVE-2009-4019 mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle… Also affects mysql-dfsg-5.0
• CVE-2009-2446 Multiple format string vulnerabilities in the dispatch_command function in… Also affects mysql-dfsg-5.0
• CVE-2007-5969 MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server… Also affects mysql-dfsg-5.0
• CVE-2007-5925 The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in… Also affects mysql-dfsg-5.0
• CVE-2007-3780 MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service… Also affects mysql-dfsg-5.0
• CVE-2007-2583 The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before… Also affects mysql-dfsg-5.0
• CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119