Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2006-3738

54
FAUCET Score

CVE-2006-3738 describes a critical buffer overflow vulnerability in the SSL_get_shared_ciphers function of OpenSSL versions 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d. This flaw allows remote attackers to trigger unspecified impact through a long list of ciphers. With a CVSS score of 10.0, it presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its age and high severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
0.9.7CPE matchmatch criteria
cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*
0.9.7aCPE matchmatch criteria
cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*
0.9.7bCPE matchmatch criteria
cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*
0.9.7cCPE matchmatch criteria
cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*
0.9.7dCPE matchmatch criteria
cpe:2.3:a:openssl:openssl:0.9.7d:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

10.0HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
48.58%
Probability of exploitation in next 30 days
EPSS Percentile
98.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.4858 is in the 98th percentile among its peer group of 51,553 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (17)

debianpatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 2.1Fixed in: openssl095a-0:0.9.5a-32
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 2.1Fixed in: openssl096-0:0.9.6-32
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: openssl-0:0.9.7a-33.21
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: openssl096b-0:0.9.6b-16.46
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: openssl-0:0.9.7a-43.14
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: openssl096b-0:0.9.6b-22.46
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn-solaris-bootstrap-0:5.0.2-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Network Satellite Server v 4.2Fixed in: rhn_solaris_bootstrap_5_0_2_3-0:1-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn-solaris-bootstrap-0:5.0.2-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Network Satellite Server v 4.2 (RHEL3)Fixed in: rhn_solaris_bootstrap_5_0_2_3-0:1-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn-solaris-bootstrap-0:5.0.2-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Network Satellite Server v 5.0Fixed in: rhn_solaris_bootstrap_5_0_2_3-0:1-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Network Satellite Server v 5.1Fixed in: rhn-solaris-bootstrap-0:5.1.1-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Network Satellite Server v 5.1Fixed in: rhn_solaris_bootstrap_5_1_1_3-0:1-0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 2.1Fixed in: openssl-0:0.9.6b-46
View patch
ubuntupatch availablevia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2006-3738Important

openssl get_shared_ciphers overflow

Sep 28, 2006

References

ftp.netbsd.org / pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc
patches.sgi.com / support/free/security/advisories/20061001-01-P.asc
docs.info.apple.com / article.html
h20000.www2.hp.com / bizsupport/TechSupport/Document.jsp
issues.rpath.com / browse/RPL-613
itrc.hp.com / service/cki/docDisplay.do
itrc.hp.com / service/cki/docDisplay.do
kolab.org / security/kolab-vendor-notice-11.txt
Patch
lists.apple.com / archives/security-announce/2006/Nov/msg00001.html
lists.grok.org.uk / pipermail/full-disclosure/2006-September/049715.html
Patch
marc.info
openbsd.org / errata.html
Patch
openvpn.net / changelog.html
Patch
secunia.com / advisories/22094
PatchVendor Advisory
secunia.com / advisories/22116
PatchVendor Advisory
secunia.com / advisories/22130
PatchVendor Advisory
secunia.com / advisories/22165
PatchVendor Advisory
secunia.com / advisories/22166
PatchVendor Advisory
secunia.com / advisories/22172
PatchVendor Advisory
secunia.com / advisories/22186
PatchVendor Advisory
secunia.com / advisories/22193
PatchVendor Advisory
secunia.com / advisories/22207
PatchVendor Advisory
secunia.com / advisories/22212
PatchVendor Advisory
secunia.com / advisories/22216
PatchVendor Advisory
secunia.com / advisories/22220
PatchVendor Advisory
secunia.com / advisories/22240
PatchVendor Advisory
secunia.com / advisories/22259
PatchVendor Advisory
secunia.com / advisories/22260
PatchVendor Advisory
secunia.com / advisories/22284
PatchVendor Advisory
secunia.com / advisories/22298
secunia.com / advisories/22330
PatchVendor Advisory
secunia.com / advisories/22385
secunia.com / advisories/22460
secunia.com / advisories/22487
secunia.com / advisories/22500
secunia.com / advisories/22544
secunia.com / advisories/22626
secunia.com / advisories/22633
secunia.com / advisories/22654
secunia.com / advisories/22758
secunia.com / advisories/22772
secunia.com / advisories/22791
secunia.com / advisories/22799
secunia.com / advisories/23038
secunia.com / advisories/23155
secunia.com / advisories/23280
secunia.com / advisories/23309
secunia.com / advisories/23340
secunia.com / advisories/23680
secunia.com / advisories/23794
secunia.com / advisories/23915
secunia.com / advisories/24930
secunia.com / advisories/24950
secunia.com / advisories/25889
secunia.com / advisories/26329
secunia.com / advisories/30124
secunia.com / advisories/30161
secunia.com / advisories/31492
security.freebsd.org / advisories/FreeBSD-SA-06:23.openssl.asc
PatchVendor Advisory
security.gentoo.org / glsa/glsa-200610-11.xml
securitytracker.com / id
Patch
securitytracker.com / id
exchange.xforce.ibmcloud.com / vulnerabilities/29237
slackware.com / security/viewer.php
Patch
sourceforge.net / project/shownotes.php
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4256
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9370
sunsolve.sun.com / search/document.do
Patch
sunsolve.sun.com / search/document.do
sunsolve.sun.com / search/document.do
support.avaya.com / elmodocs2/security/ASA-2006-220.htm
support.avaya.com / elmodocs2/security/ASA-2006-260.htm
www2.itrc.hp.com / service/cki/docDisplay.do
www130.nortelnetworks.com / go/main.jsp
cisco.com / en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html
cisco.com / warp/public/707/cisco-sr-20061108-openssl.shtml
debian.org / security/2006/dsa-1185
Patch
debian.org / security/2006/dsa-1195
PatchVendor Advisory
gentoo.org / security/en/glsa/glsa-200612-11.xml
gentoo.org / security/en/glsa/glsa-200805-07.xml
kb.cert.org / vuls/id/547300
US Government Resource
mandriva.com / security/advisories
mandriva.com / security/advisories
mandriva.com / security/advisories
novell.com / linux/security/advisories/2006_24_sr.html
PatchVendor Advisory
novell.com / linux/security/advisories/2006_58_openssl.html
PatchVendor Advisory
openpkg.org / security/advisories/OpenPKG-SA-2006.021-openssl.html
PatchVendor Advisory
openssl.org / news/secadv_20060928.txt
oracle.com / technetwork/topics/security/cpujan2007-101493.html
osvdb.org / 29262
Patch
redhat.com / support/errata/RHSA-2006-0695.html
Patch
redhat.com / support/errata/RHSA-2008-0629.html
securityfocus.com / archive/1/447318/100/0/threaded
securityfocus.com / archive/1/447393/100/0/threaded
securityfocus.com / archive/1/456546/100/200/threaded
securityfocus.com / archive/1/470460/100/0/threaded
securityfocus.com / bid/20249
Patch
securityfocus.com / bid/22083
serv-u.com / releasenotes
trustix.org / errata/2006/0054
Patch
ubuntu.com / usn/usn-353-1
Patch
us-cert.gov / cas/techalerts/TA06-333A.html
US Government Resource
vmware.com / support/esx21/doc/esx-213-200612-patch.html
vmware.com / support/esx25/doc/esx-253-200612-patch.html
vmware.com / support/esx25/doc/esx-254-200612-patch.html
vmware.com / support/esx2/doc/esx-202-200612-patch.html
vmware.com / support/vi3/doc/esx-3069097-patch.html
vmware.com / support/vi3/doc/esx-9986131-patch.html
vupen.com / english/advisories/2006/3820
vupen.com / english/advisories/2006/3860
vupen.com / english/advisories/2006/3869
vupen.com / english/advisories/2006/3902
vupen.com / english/advisories/2006/3936
vupen.com / english/advisories/2006/4036
vupen.com / english/advisories/2006/4264
vupen.com / english/advisories/2006/4314
vupen.com / english/advisories/2006/4401
vupen.com / english/advisories/2006/4417
vupen.com / english/advisories/2006/4443
vupen.com / english/advisories/2006/4750
vupen.com / english/advisories/2007/0343
vupen.com / english/advisories/2007/1401
vupen.com / english/advisories/2007/2315
vupen.com / english/advisories/2007/2783
xerox.com / downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf