Every CVESearch/Get API key

CVE-2006-7250

The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote...

5.0 MediumFix available

CVE-2006-7250 is a medium vulnerability (CVSS 5.0) in Openssl, published February 29, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.74%, the 94th percentile. Fixed in openssl 1.0.0h-1.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
6.74%EPSS, 94th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.0.0h-1openssl +40 more

Description

The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.

Exploit likelihood

6.74%Up 0.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openssl
Debian:12
before 1.0.0h-1
1.0.0h-1
openssl
Debian:13
before 1.0.0h-1
1.0.0h-1
openssl
Debian:14
before 1.0.0h-1
1.0.0h-1
openssl
Debian:6.0
From an advisory covering 4 CVEs
before 0.9.8o-4squeeze11, plus listed versions
0.9.8o-40.9.8o-4squeeze10.9.8o-4squeeze20.9.8o-4squeeze30.9.8o-4squeeze4
Show 5 moreShow less
0.9.8o-4squeeze4~bpo50+10.9.8o-4squeeze50.9.8o-4squeeze70.9.8o-4squeeze80.9.8o-4squeeze9
0.9.8o-4squeeze11
openssl
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
before 0:0.9.8e-12.el5
0:0.9.8e-12.el5
openssl-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
before 0:0.9.8e-12.el5
0:0.9.8e-12.el5
openssl-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 7 CVEs
before 0:0.9.8e-12.el5
0:0.9.8e-12.el5
openssl
Red Hat:enterprise_linux:5::client
From an advisory covering 7 CVEs
before 0:0.9.8e-12.el5
0:0.9.8e-12.el5
openssl-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 7 CVEs
before 0:0.9.8e-12.el5
0:0.9.8e-12.el5
openssl-perl
Red Hat:enterprise_linux:5::client
From an advisory covering 7 CVEs
before 0:0.9.8e-12.el5
0:0.9.8e-12.el5
Show 31 moreShow less
Affected packages
PackageAffectedFixed
openssl
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
before 0:0.9.8e-12.el5
0:0.9.8e-12.el5
openssl-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
before 0:0.9.8e-12.el5
0:0.9.8e-12.el5
openssl-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
before 0:0.9.8e-12.el5
0:0.9.8e-12.el5
openssl-perl
Red Hat:enterprise_linux:5::server
From an advisory covering 7 CVEs
before 0:0.9.8e-12.el5
0:0.9.8e-12.el5
libqt4
SUSE:Linux Enterprise Desktop 12
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Desktop 12
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Desktop 12 SP1
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Desktop 12 SP1
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Software Development Kit 12
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Software Development Kit 12
From an advisory covering 54 CVEs
before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Software Development Kit 12
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Software Development Kit 12 SP1
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Software Development Kit 12 SP1
From an advisory covering 54 CVEs
before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Software Development Kit 12 SP1
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server 12
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server 12
From an advisory covering 54 CVEs
before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server 12
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 54 CVEs
before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server 12 SP1
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server 12 SP1
From an advisory covering 54 CVEs
before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server 12 SP1
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 54 CVEs
before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Workstation Extension 12
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Workstation Extension 12
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Workstation Extension 12 SP1
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Workstation Extension 12 SP1
From an advisory covering 54 CVEs
before 4.8.6-7.1
4.8.6-7.1
openssl-1_1
openSUSE:Tumbleweed
From an advisory covering 136 CVEs
before 1.1.1l-1.2
1.1.1l-1.2

What each source reports

NVD Score used5.0

The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.

Record
CVE-2006-7250
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE ListNo score

The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.

Record
CVE-2006-7250
Updated
2026-11-02
EUVDEUVD-2006-7227No score

The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.

Record
EUVD-2006-7227
Updated
2026-11-03
GitHub AdvisoriesGHSA-jcg3-jcx7-j7xfNo score

The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote...

The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.

Record
GHSA-jcg3-jcx7-j7xf
Updated
2026-11-02
OSVBELL-CVE-2006-72505.0

CVE-2006-7250 does not affect BellSoft software

Record
BELL-CVE-2006-7250
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSVNo score

The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.

Record
CVE-2006-7250
Updated
2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2006-7250No score

The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.

Record
DEBIAN-CVE-2006-7250
Updated
2026-11-02
OSVopenSUSE-SU-2024:10271-1No score

libopenssl-devel-1.0.2j-2.2 on GA media

These are all security issues fixed in the libopenssl-devel-1.0.2j-2.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10271-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10529-1No score

libopenssl1_0_0-steam-1.0.2h-4.1 on GA media

These are all security issues fixed in the libopenssl1_0_0-steam-1.0.2h-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10529-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11127-1No score

libopenssl-1_1-devel-1.1.1l-1.2 on GA media

These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11127-1
Updated
2026-11-02
OSVSUSE-FU-2022:0445-1No score

Feature update for venv-salt-minion

This feature update for venv-salt-minion provides the following changes:

  • Introduce venv-salt-minion.
  • Mention fixed issues provided with the bundle.
Record
SUSE-FU-2022:0445-1
Updated
2026-11-02
OSVSUSE-SU-2015:1184-1No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-2015:1184-1
Updated
2026-11-02
OSVSUSE-SU-403No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-403
Updated
2026-11-02
OSVSUSE-SU-403 Forbidden-1No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-403 Forbidden-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 568 references. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open