Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-750-1
HistoryMar 30, 2009 - 12:00 a.m.

OpenSSL vulnerability

2009-03-3000:00:00
ubuntu.com
29

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.7 High

AI Score

Confidence

High

0.271 Low

EPSS

Percentile

96.8%

JSON

Releases

  • Ubuntu 8.10
  • Ubuntu 8.04
  • Ubuntu 7.10
  • Ubuntu 6.06

Packages

  • openssl -

Details

It was discovered that OpenSSL did not properly validate the length of an
encoded BMPString or UniversalString when printing ASN.1 strings. If a user
or automated system were tricked into processing a crafted certificate, an
attacker could cause a denial of service via application crash in
applications linked against OpenSSL.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchlibssl0.9.8< 0.9.8g-10.1ubuntu2.2UNKNOWN
Ubuntu8.10noarchlibcrypto0.9.8-udeb< 0.9.8g-10.1ubuntu2.2UNKNOWN
Ubuntu8.10noarchlibssl-dev< 0.9.8g-10.1ubuntu2.2UNKNOWN
Ubuntu8.10noarchlibssl0.9.8< dbg-0.9.8g-10.1ubuntu2.2UNKNOWN
Ubuntu8.10noarchopenssl< 0.9.8g-10.1ubuntu2.2UNKNOWN
Ubuntu8.04noarchlibssl0.9.8< 0.9.8g-4ubuntu3.5UNKNOWN
Ubuntu8.04noarchlibcrypto0.9.8-udeb< 0.9.8g-4ubuntu3.5UNKNOWN
Ubuntu8.04noarchlibssl-dev< 0.9.8g-4ubuntu3.5UNKNOWN
Ubuntu8.04noarchlibssl0.9.8-dbg< 0.9.8g-4ubuntu3.5UNKNOWN
Ubuntu8.04noarchopenssl< 0.9.8g-4ubuntu3.5UNKNOWN
Rows per page:
1-10 of 201

Related

nessus 42
openvas 58
gentoo 1
freebsd 1
cvelist 1
f5 2
securityvulns 3
cbl_mariner 1
ubuntucve 1
cve 1
openssl 1
veracode 1
nvd 1
debian 1
freebsd_advisory 1
prion 1
debiancve 1
oraclelinux 2
slackware 1
altlinux 4
threatpost 1
redhat 2
centos 2
vmware 6
suse 2
lenovo 2
nessus
nessus
Debian DSA-1763-1 : openssl - programming error
2009-04-07 00:00:00
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : openssl vulnerability (USN-750-1)
2009-04-23 00:00:00
FreeBSD : FreeBSD -- remotely exploitable crash in OpenSSL (2539)
2009-05-08 00:00:00
openvas
openvas
FreeBSD Ports: FreeBSD
2009-05-11 00:00:00
Mandrake Security Advisory MDVSA-2009:087 (openssl)
2009-04-06 00:00:00
FreeBSD Ports: FreeBSD
2009-05-11 00:00:00
gentoo
gentoo
OpenSSL: Denial of service
2009-04-07 00:00:00
freebsd
freebsd
FreeBSD -- remotely exploitable crash in OpenSSL
2009-03-25 00:00:00
cvelist
cvelist
CVE-2009-0590
2009-03-27 16:00:00
f5
f5
K15358 : OpenSSL vulnerability CVE-2009-0590
2014-06-19 00:00:00
SOL15358 - OpenSSL vulnerability CVE-2009-0590
2014-06-19 00:00:00
securityvulns
securityvulns
OpenSSL library BMPString DoS
2009-04-01 00:00:00
[USN-750-1] OpenSSL vulnerability
2009-04-01 00:00:00
[security bulletin] HPSBMA02447 SSRT090062 rev.1 - Insight Control Suite For Linux &#40;ICE-LX&#41; Cross Site Request Forgery &#40;CSRF&#41; , Remote Execution of Arbitrary Code, Denial of Service &#40;DoS&#41;, and Other Vulnerabilities
2009-08-14 00:00:00
cbl_mariner
cbl_mariner
CVE-2009-0590 affecting package openssl 1.1.1g-6
2021-08-11 06:39:26
ubuntucve
ubuntucve
CVE-2009-0590
2009-03-27 00:00:00
cve
cve
CVE-2009-0590
2009-03-27 16:30:00
openssl
openssl
Vulnerability in OpenSSL CVE-2009-0590
2009-03-25 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:41:59
nvd
nvd
CVE-2009-0590
2009-03-27 16:30:00
debian
debian
[SECURITY] [DSA 1763-1] New openssl packages fix denial of service
2009-04-06 16:25:35
freebsd_advisory
freebsd_advisory
FreeBSD-SA-09:08.openssl
2009-04-22 00:00:00
prion
prion
Authentication flaw
2009-03-27 16:30:00
debiancve
debiancve
CVE-2009-0590
2009-03-27 16:30:00
oraclelinux
oraclelinux
openssl security update
2010-03-25 00:00:00
openssl security, bug fix, and enhancement update
2009-09-08 00:00:00
slackware
slackware
openssl
2009-04-07 23:29:36
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 0.9.8k-alt1
2009-03-25 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 0.9.8k-alt1
2009-03-25 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8k-alt1
2009-03-25 00:00:00
threatpost
threatpost
Multiple vulnerabilities found, fixed in OpenSSL
2009-03-26 23:43:56
redhat
redhat
(RHSA-2010:0163) Moderate: openssl security update
2010-03-25 00:00:00
(RHSA-2009:1335) Moderate: openssl security, bug fix, and enhancement update
2009-09-02 09:47:12
centos
centos
openssl security update
2010-03-25 22:38:39
openssl security update
2009-09-15 18:42:01
vmware
vmware
VMware ESX third party updates for Service Console
2010-12-07 00:00:00
VMware ESX third party updates for Service Console
2010-12-07 00:00:00
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
suse
suse
Security update for compat-openssl097g (important)
2011-07-27 17:08:16
compat-openssl097g (important)
2011-07-27 16:08:25
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.7 High

AI Score

Confidence

High

0.271 Low

EPSS

Percentile

96.8%

JSON
Related for USN-750-1
nessus42openvas58gentoo1freebsd1cvelist1f52securityvulns3cbl_mariner1ubuntucve1cve1openssl1veracode1nvd1debian1freebsd_advisory1prion1debiancve1oraclelinux2slackware1altlinux4threatpost1redhat2centos2vmware6suse2lenovo2