CVE-2009-0590

中 5.0CVE-2009-0590 · 27/03/2009 公開 · 16/06/2026 更新

要点

CVE-2009-0590 は openssl (openssl) に影響する深刻度「中」 (CVSS 5.0) の脆弱性です。
今後30日間に悪用される確率（EPSS）：6.7%（全脆弱性の 93.9% より高い）。
対処：0.9.8k 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
openssl openssl	`< 0.9.8k`	`0.9.8k`

概要

The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.

参考情報

ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc · Third Party Advisory
lists.apple.com/archives/security-announce/2009/Sep/msg00004.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html · Mailing List
lists.vmware.com/pipermail/security-announce/2010/000082.html · Third Party Advisory
marc.info · Mailing List
marc.info · Mailing List
marc.info · Mailing List
secunia.com/advisories/34411 · Third Party Advisory
secunia.com/advisories/34460 · Third Party Advisory
secunia.com/advisories/34509 · Third Party Advisory
secunia.com/advisories/34561 · Third Party Advisory
secunia.com/advisories/34666 · Third Party Advisory
secunia.com/advisories/34896 · Third Party Advisory
secunia.com/advisories/34960 · Third Party Advisory
secunia.com/advisories/35065 · Third Party Advisory
secunia.com/advisories/35181 · Third Party Advisory
secunia.com/advisories/35380 · Third Party Advisory
secunia.com/advisories/35729 · Third Party Advisory
secunia.com/advisories/36533 · Third Party Advisory
secunia.com/advisories/36701 · Third Party Advisory
secunia.com/advisories/38794 · Third Party Advisory
secunia.com/advisories/38834 · Third Party Advisory
secunia.com/advisories/42467 · Third Party Advisory
secunia.com/advisories/42724 · Third Party Advisory
secunia.com/advisories/42733 · Third Party Advisory
security.freebsd.org/advisories/FreeBSD-SA-09:08.openssl.asc · Third Party Advisory
securitytracker.com/id · Third Party Advisory
sourceforge.net/project/shownotes.php · Patch
sunsolve.sun.com/search/document.do · Broken Link
support.apple.com/kb/HT3865 · Third Party Advisory
support.avaya.com/elmodocs2/security/ASA-2009-172.htm · Third Party Advisory
voodoo-circle.sourceforge.net/sa/sa-20090326-01.html · Third Party Advisory
wiki.rpath.com/Advisories:rPSA-2009-0057 · Broken Link
wiki.rpath.com/wiki/Advisories:rPSA-2009-0057 · Broken Link
debian.org/security/2009/dsa-1763 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
openssl.org/news/secadv_20090325.txt · Vendor Advisory
osvdb.org/52864 · Broken Link
php.net/archive/2009.php · Third Party Advisory
redhat.com/support/errata/RHSA-2009-1335.html · Third Party Advisory
securityfocus.com/archive/1/502429/100/0/threaded · Third Party Advisory
securityfocus.com/archive/1/515055/100/0/threaded · Third Party Advisory
securityfocus.com/bid/34256 · Patch
ubuntu.com/usn/usn-750-1 · Third Party Advisory
vmware.com/security/advisories/VMSA-2010-0019.html · Third Party Advisory
vupen.com/english/advisories/2009/0850 · Permissions Required
vupen.com/english/advisories/2009/1020 · Permissions Required
vupen.com/english/advisories/2009/1175 · Permissions Required
vupen.com/english/advisories/2009/1220 · Permissions Required
vupen.com/english/advisories/2009/1548 · Permissions Required
vupen.com/english/advisories/2010/0528 · Permissions Required
vupen.com/english/advisories/2010/3126 · Permissions Required
exchange.xforce.ibmcloud.com/vulnerabilities/49431 · Third Party Advisory
kb.bluecoat.com/index · Third Party Advisory
lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html · Third Party Advisory
lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996 · Third Party Advisory

openssl のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン