PT-2009-6752 · Openssl+1 · Openssl+1

Publicado 1970-01-01 · Atualizado 2024-06-15 · CVE-2009-0789

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.8k

Description The issue is related to the improper handling of a malformed ASN.1 structure in OpenSSL, which can be exploited remotely. This can lead to a denial of service, causing invalid memory access and application crash, by placing the malformed structure in the public key of a certificate, such as an RSA public key.

Recommendations For versions prior to 0.9.8k, update to version 0.9.8k or later to resolve the issue. As a temporary workaround, consider restricting access to certificates with potentially malformed ASN.1 structures until a patch is available.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

CWE-189

Identificadores relacionados

BDU:2015-05174

BDU:2015-05175

CVE-2009-0789

HPSBUX02435

OPENSUSE-SU-2024:11127-1

Produtos afetados

Hp-Ux

Openssl

Referências · 177

• https://suse.com/security/cve/CVE-2019-1549 · Nota
• https://suse.com/security/cve/CVE-2016-7055 · Nota
• http://xforce.iss.net/xforce/xfdb/49433 · Nota
• https://suse.com/security/cve/CVE-2018-0735 · Nota
• https://suse.com/security/cve/CVE-2021-3712 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847 · Nota
• https://suse.com/security/cve/CVE-2014-3513 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2007-3108 · Nota
• https://suse.com/security/cve/CVE-2021-23841 · Nota
• https://suse.com/security/cve/CVE-2018-0739 · Nota
• https://suse.com/security/cve/CVE-2016-6303 · Nota
• https://suse.com/security/cve/CVE-2012-2686 · Nota
• https://suse.com/security/cve/CVE-2017-3732 · Nota
• https://suse.com/security/cve/CVE-2012-4929 · Nota