openssl: missing bn_wexpand return value checks

🗓️ 25 May 2010 20:41:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 4 Views

OpenSSL before 0.9.8m does not check NULL from bn_wexpand in several files, enabling attacks.

Reporter	Title	Published	Views	Family All 145
0day.today	OpenSSL < 0.9.8l and previous versions Multiple Vulnerability	9 Mar 201000:00	–	zdt
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address multiple CVEs for vTPM1.2	5 Dec 202223:45	–	ibm
ALT Linux	Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8m-alt1	26 Feb 201000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package openssl10 version 0.9.8m-alt1	26 Feb 201000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 6 package openssl10 version 0.9.8m-alt1	26 Feb 201000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package openssl10 version 0.9.8m-alt1	26 Feb 201000:00	–	altlinux
Tenable Nessus	OpenSSL < 0.9.8m Multiple Vulnerabilities	9 Mar 201000:00	–	nessus
Tenable Nessus	Mac OS X 10.6 < 10.6.8 Multiple Vulnerabilities	23 Jun 201100:00	–	nessus
Tenable Nessus	Mac OS X 10.6 < 10.6.8 Multiple Vulnerabilities	23 Jun 201100:00	–	nessus
Tenable Nessus	OpenSSL < 0.9.8m Multiple Vulnerabilities	9 Mar 201000:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	5	any	rhev-hypervisor	0:5.4-2.1.12.1.el5_4rhev2_1.noarch	rhev-hypervisor-0:5.4-2.1.12.1.el5_4rhev2_1.noarch.noarch.rpm
Red Hat Enterprise Linux	5	any	rhev-hypervisor-pxe	0:5.4-2.1.12.1.el5_4rhev2_1.noarch	rhev-hypervisor-pxe-0:5.4-2.1.12.1.el5_4rhev2_1.noarch.noarch.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2009-3245
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2009-3245
cve	www.cve.org/CVERecord

28 Jun 2026 12:21Current

7.1High risk

Vulners AI Score7.1

CVSS 210

EPSS0.06732

openssl null return bn_wexpand attack vectors