Lucene search

K
cvelistRedhatCVELIST:CVE-2009-0591
HistoryMar 27, 2009 - 4:00 p.m.

CVE-2009-0591

2009-03-2716:00:00
redhat
raw.githubusercontent.com

6.2 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.4%

The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote attackers to repudiate a signature that originally appeared to be valid but was actually invalid.

6.2 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.4%