QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2009-3245

Back to search

CVE-2009-3245

Published: Mar 5, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2010-0916
vdb-entry
x_refsource_VUPEN
42724
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:11738
vdb-entry
signature
x_refsource_OVAL
39461
third-party-advisory
x_refsource_SECUNIA
FEDORA-2010-5357
vendor-advisory
x_refsource_FEDORA
SSA:2010-060-02
vendor-advisory
x_refsource_SLACKWARE
APPLE-SA-2011-06-23-1
vendor-advisory
x_refsource_APPLE
oval:org.mitre.oval:def:6640
vdb-entry
signature
x_refsource_OVAL
HPSBOV02540
vendor-advisory
x_refsource_HP
38761
third-party-advisory
x_refsource_SECUNIA
SUSE-SR:2010:013
vendor-advisory
x_refsource_SUSE
38562
vdb-entry
x_refsource_BID
oval:org.mitre.oval:def:9790
vdb-entry
signature
x_refsource_OVAL
RHSA-2010:0977
vendor-advisory
x_refsource_REDHAT
ADV-2010-0839
vdb-entry
x_refsource_VUPEN
MDVSA-2010:076
vendor-advisory
x_refsource_MANDRIVA
HPSBUX02517
vendor-advisory
x_refsource_HP
USN-1003-1
vendor-advisory
x_refsource_UBUNTU
39932
third-party-advisory
x_refsource_SECUNIA
ADV-2010-0933
vdb-entry
x_refsource_VUPEN
RHSA-2011:0896
vendor-advisory
x_refsource_REDHAT
SSRT100058
vendor-advisory
x_refsource_HP
ADV-2010-1216
vdb-entry
x_refsource_VUPEN
42733
third-party-advisory
x_refsource_SECUNIA
37291
third-party-advisory
x_refsource_SECUNIA
FEDORA-2010-5744
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now