CVE-2007-4995: OpenSSL

High severity, CVSS 9.3. EPSS: 10.5% chance of exploitation in the next 30 days.

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

• OpenSSL OpenSSL: version 0.9.8 only; version 0.9.8a only; version 0.9.8b only; version 0.9.8c only; version 0.9.8d only; version 0.9.8e only

Published 2007-10-13. Last modified 2026-06-16.