Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-5135

26
FAUCET Score

CVE-2007-5135 describes an off-by-one error in the SSL_get_shared_ciphers function within OpenSSL versions 0.9.7 through 0.9.7l and 0.9.8 through 0.9.8f. This vulnerability, introduced during a fix for a previous issue, could allow remote attackers to trigger a one-byte buffer underflow via a specially crafted packet. With a CVSS score of 6.8, it is considered a medium-severity vulnerability, potentially leading to partial confidentiality, integrity, and availability impacts, though code execution was unconfirmed at the time. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
0.9.7CPE matchmatch criteria
cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*
0.9.7CPE matchmatch criteria
cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*
0.9.7CPE matchmatch criteria
cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*
0.9.7CPE matchmatch criteria
cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*
0.9.7CPE matchmatch criteria
cpe:2.3:a:openssl:openssl:0.9.7:beta4:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

6.8MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
16.06%
Probability of exploitation in next 30 days
EPSS Percentile
96.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.1606 is in the 97th percentile among its peer group of 19,958 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (4)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 2.1Fixed in: openssl-0:0.9.6b-48
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: openssl-0:0.9.7a-33.24
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: openssl-0:0.9.7a-43.17.el4_6.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: openssl-0:0.9.8b-8.3.el5_0.2
View patch

Vendor Advisories (1)

redhatCVE-2007-5135Moderate

openssl: SSL_get_shared_ciphers() off-by-one

Sep 27, 2007

References

ftp.netbsd.org / pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc
lists.apple.com / archives/security-announce//2008/Jul/msg00003.html
lists.opensuse.org / opensuse-security-announce/2008-03/msg00001.html
lists.vmware.com / pipermail/security-announce/2008/000002.html
bugs.gentoo.org / show_bug.cgi
secunia.com / advisories/22130
Vendor Advisory
secunia.com / advisories/27012
Vendor Advisory
secunia.com / advisories/27021
Vendor Advisory
secunia.com / advisories/27031
Vendor Advisory
secunia.com / advisories/27051
Vendor Advisory
secunia.com / advisories/27078
Vendor Advisory
secunia.com / advisories/27097
Vendor Advisory
secunia.com / advisories/27186
Vendor Advisory
secunia.com / advisories/27205
Vendor Advisory
secunia.com / advisories/27217
Vendor Advisory
secunia.com / advisories/27229
Vendor Advisory
secunia.com / advisories/27330
Vendor Advisory
secunia.com / advisories/27394
Vendor Advisory
secunia.com / advisories/27851
Vendor Advisory
secunia.com / advisories/27870
Vendor Advisory
secunia.com / advisories/27961
Vendor Advisory
secunia.com / advisories/28368
Vendor Advisory
secunia.com / advisories/29242
secunia.com / advisories/30124
secunia.com / advisories/30161
secunia.com / advisories/31308
secunia.com / advisories/31326
secunia.com / advisories/31467
secunia.com / advisories/31489
security.freebsd.org / advisories/FreeBSD-SA-07:08.openssl.asc
security.gentoo.org / glsa/glsa-200710-06.xml
securityreason.com / securityalert/3179
exchange.xforce.ibmcloud.com / vulnerabilities/36837
issues.rpath.com / browse/RPL-1769
issues.rpath.com / browse/RPL-1770
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10904
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5337
sunsolve.sun.com / search/document.do
sunsolve.sun.com / search/document.do
support.avaya.com / elmodocs2/security/ASA-2007-485.htm
usn.ubuntu.com / 522-1
redhat.com / archives/fedora-package-announce/2007-October/msg00218.html
Vendor Advisory
wiki.rpath.com / wiki/Advisories:rPSA-2008-0241
www14.software.ibm.com / webapp/set2/subscriptions/pqvcmjd
www14.software.ibm.com / webapp/set2/subscriptions/pqvcmjd
debian.org / security/2007/dsa-1379
gentoo.org / security/en/glsa/glsa-200805-07.xml
mandriva.com / security/advisories
novell.com / linux/security/advisories/2007_20_sr.html
openbsd.org / errata40.html
openbsd.org / errata41.html
openbsd.org / errata42.html
openssl.org / news/secadv_20071012.txt
redhat.com / support/errata/RHSA-2007-0813.html
Vendor Advisory
redhat.com / support/errata/RHSA-2007-0964.html
Vendor Advisory
redhat.com / support/errata/RHSA-2007-1003.html
Vendor Advisory
securityfocus.com / archive/1/480855/100/0/threaded
securityfocus.com / archive/1/481217/100/0/threaded
securityfocus.com / archive/1/481488/100/0/threaded
securityfocus.com / archive/1/481506/100/0/threaded
securityfocus.com / archive/1/484353/100/0/threaded
securityfocus.com / archive/1/485936/100/0/threaded
securityfocus.com / archive/1/486859/100/0/threaded
securityfocus.com / bid/25831
securitytracker.com / id
vmware.com / security/advisories/VMSA-2008-0001.html
vmware.com / security/advisories/VMSA-2008-0013.html
vupen.com / english/advisories/2007/3325
vupen.com / english/advisories/2007/3625
vupen.com / english/advisories/2007/4042
vupen.com / english/advisories/2007/4144
vupen.com / english/advisories/2008/0064
vupen.com / english/advisories/2008/2268
vupen.com / english/advisories/2008/2361
vupen.com / english/advisories/2008/2362