CVE-2009-0590

MEDIO 5.0CVE-2009-0590 · Published 27/03/2009 · updated 16/06/2026

In breve

CVE-2009-0590 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda openssl (openssl).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 6.7%, superiore al 93.9% delle vulnerabilità.
Correzione: aggiornare a 0.9.8k o successiva.

Package	Affected versions	Patched versions
openssl openssl	`< 0.9.8k`	`0.9.8k`

Description

The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.

References

ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc · Third Party Advisory
lists.apple.com/archives/security-announce/2009/Sep/msg00004.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html · Mailing List
lists.vmware.com/pipermail/security-announce/2010/000082.html · Third Party Advisory
marc.info · Mailing List
marc.info · Mailing List
marc.info · Mailing List
secunia.com/advisories/34411 · Third Party Advisory
secunia.com/advisories/34460

Altre vulnerabilità di openssl

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free