csaf_redhat - rhsa-2009

rhsa-2009_1335

Vulnerability from csaf_redhat

Published

2009-09-02 08:00

Modified

2024-11-22 02:44

Summary

Red Hat Security Advisory: openssl security, bug fix, and enhancement update

Notes

Topic

Updated openssl packages that fix several security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Details

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, as well as a full-strength general purpose cryptography library. Datagram TLS (DTLS) is a protocol based on TLS that is capable of securing datagram transport (for example, UDP). Multiple denial of service flaws were discovered in OpenSSL's DTLS implementation. A remote attacker could use these flaws to cause a DTLS server to use excessive amounts of memory, or crash on an invalid memory access or NULL pointer dereference. (CVE-2009-1377, CVE-2009-1378, CVE-2009-1379, CVE-2009-1386, CVE-2009-1387) Note: These flaws only affect applications that use DTLS. Red Hat does not ship any DTLS client or server applications in Red Hat Enterprise Linux. An input validation flaw was found in the handling of the BMPString and UniversalString ASN1 string types in OpenSSL's ASN1_STRING_print_ex() function. An attacker could use this flaw to create a specially-crafted X.509 certificate that could cause applications using the affected function to crash when printing certificate contents. (CVE-2009-0590) Note: The affected function is rarely used. No application shipped with Red Hat Enterprise Linux calls this function, for example. These updated packages also fix the following bugs: * "openssl smime -verify -in" verifies the signature of the input file and the "-verify" switch expects a signed or encrypted input file. Previously, running openssl on an S/MIME file that was not encrypted or signed caused openssl to segfault. With this update, the input file is now checked for a signature or encryption. Consequently, openssl now returns an error and quits when attempting to verify an unencrypted or unsigned S/MIME file. (BZ#472440) * when generating RSA keys, pairwise tests were called even in non-FIPS mode. This prevented small keys from being generated. With this update, generating keys in non-FIPS mode no longer calls the pairwise tests and keys as small as 32-bits can be generated in this mode. Note: In FIPS mode, pairwise tests are still called and keys generated in this mode must still be 1024-bits or larger. (BZ#479817) As well, these updated packages add the following enhancements: * both the libcrypto and libssl shared libraries, which are part of the OpenSSL FIPS module, are now checked for integrity on initialization of FIPS mode. (BZ#475798) * an issuing Certificate Authority (CA) allows multiple certificate templates to inherit the CA's Common Name (CN). Because this CN is used as a unique identifier, each template had to have its own Certificate Revocation List (CRL). With this update, multiple CRLs with the same subject name can now be stored in a X509_STORE structure, with their signature field being used to distinguish between them. (BZ#457134) * the fipscheck library is no longer needed for rebuilding the openssl source RPM. (BZ#475798) OpenSSL users should upgrade to these updated packages, which resolve these issues and add these enhancements.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Updated openssl packages that fix several security issues, various bugs,\nand add enhancements are now available for Red Hat Enterprise Linux 5.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
            title: "Topic",
         },
         {
            category: "general",
            text: "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)\nand Transport Layer Security (TLS v1) protocols, as well as a full-strength\ngeneral purpose cryptography library. Datagram TLS (DTLS) is a protocol\nbased on TLS that is capable of securing datagram transport (for example,\nUDP).\n\nMultiple denial of service flaws were discovered in OpenSSL's DTLS\nimplementation. A remote attacker could use these flaws to cause a DTLS\nserver to use excessive amounts of memory, or crash on an invalid memory\naccess or NULL pointer dereference. (CVE-2009-1377, CVE-2009-1378,\nCVE-2009-1379, CVE-2009-1386, CVE-2009-1387)\n\nNote: These flaws only affect applications that use DTLS. Red Hat does not\nship any DTLS client or server applications in Red Hat Enterprise Linux.\n\nAn input validation flaw was found in the handling of the BMPString and\nUniversalString ASN1 string types in OpenSSL's ASN1_STRING_print_ex()\nfunction. An attacker could use this flaw to create a specially-crafted\nX.509 certificate that could cause applications using the affected function\nto crash when printing certificate contents. (CVE-2009-0590)\n\nNote: The affected function is rarely used. No application shipped with Red\nHat Enterprise Linux calls this function, for example.\n\nThese updated packages also fix the following bugs:\n\n* \"openssl smime -verify -in\" verifies the signature of the input file and\nthe \"-verify\" switch expects a signed or encrypted input file. Previously,\nrunning openssl on an S/MIME file that was not encrypted or signed caused\nopenssl to segfault. With this update, the input file is now checked for a\nsignature or encryption. Consequently, openssl now returns an error and\nquits when attempting to verify an unencrypted or unsigned S/MIME file.\n(BZ#472440)\n\n* when generating RSA keys, pairwise tests were called even in non-FIPS\nmode. This prevented small keys from being generated. With this update,\ngenerating keys in non-FIPS mode no longer calls the pairwise tests and\nkeys as small as 32-bits can be generated in this mode. Note: In FIPS mode,\npairwise tests are still called and keys generated in this mode must still\nbe 1024-bits or larger. (BZ#479817)\n\nAs well, these updated packages add the following enhancements:\n\n* both the libcrypto and libssl shared libraries, which are part of the\nOpenSSL FIPS module, are now checked for integrity on initialization of\nFIPS mode. (BZ#475798)\n\n* an issuing Certificate Authority (CA) allows multiple certificate\ntemplates to inherit the CA's Common Name (CN). Because this CN is used as\na unique identifier, each template had to have its own Certificate\nRevocation List (CRL). With this update, multiple CRLs with the same\nsubject name can now be stored in a X509_STORE structure, with their\nsignature field being used to distinguish between them. (BZ#457134)\n\n* the fipscheck library is no longer needed for rebuilding the openssl\nsource RPM. (BZ#475798)\n\nOpenSSL users should upgrade to these updated packages, which resolve these\nissues and add these enhancements.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2009:1335",
            url: "https://access.redhat.com/errata/RHSA-2009:1335",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#moderate",
            url: "https://access.redhat.com/security/updates/classification/#moderate",
         },
         {
            category: "external",
            summary: "479817",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=479817",
         },
         {
            category: "external",
            summary: "492304",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=492304",
         },
         {
            category: "external",
            summary: "501253",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=501253",
         },
         {
            category: "external",
            summary: "501254",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=501254",
         },
         {
            category: "external",
            summary: "501572",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=501572",
         },
         {
            category: "external",
            summary: "503685",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=503685",
         },
         {
            category: "external",
            summary: "503688",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=503688",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1335.json",
         },
      ],
      title: "Red Hat Security Advisory: openssl security, bug fix, and enhancement update",
      tracking: {
         current_release_date: "2024-11-22T02:44:39+00:00",
         generator: {
            date: "2024-11-22T02:44:39+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.2.1",
            },
         },
         id: "RHSA-2009:1335",
         initial_release_date: "2009-09-02T08:00:00+00:00",
         revision_history: [
            {
               date: "2009-09-02T08:00:00+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2009-09-01T06:41:25+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2024-11-22T02:44:39+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Desktop (v. 5 client)",
                        product: {
                           name: "Red Hat Enterprise Linux Desktop (v. 5 client)",
                           product_id: "5Client",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:5::client",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
                        product: {
                           name: "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
                           product_id: "5Client-Workstation",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:5::client_workstation",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux (v. 5 server)",
                        product: {
                           name: "Red Hat Enterprise Linux (v. 5 server)",
                           product_id: "5Server",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:5::server",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat Enterprise Linux",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                        product: {
                           name: "openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                           product_id: "openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-devel-0:0.9.8e-12.el5.x86_64",
                        product: {
                           name: "openssl-devel-0:0.9.8e-12.el5.x86_64",
                           product_id: "openssl-devel-0:0.9.8e-12.el5.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-0:0.9.8e-12.el5.x86_64",
                        product: {
                           name: "openssl-0:0.9.8e-12.el5.x86_64",
                           product_id: "openssl-0:0.9.8e-12.el5.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-perl-0:0.9.8e-12.el5.x86_64",
                        product: {
                           name: "openssl-perl-0:0.9.8e-12.el5.x86_64",
                           product_id: "openssl-perl-0:0.9.8e-12.el5.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5?arch=x86_64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-debuginfo-0:0.9.8e-12.el5.i386",
                        product: {
                           name: "openssl-debuginfo-0:0.9.8e-12.el5.i386",
                           product_id: "openssl-debuginfo-0:0.9.8e-12.el5.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-devel-0:0.9.8e-12.el5.i386",
                        product: {
                           name: "openssl-devel-0:0.9.8e-12.el5.i386",
                           product_id: "openssl-devel-0:0.9.8e-12.el5.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-0:0.9.8e-12.el5.i386",
                        product: {
                           name: "openssl-0:0.9.8e-12.el5.i386",
                           product_id: "openssl-0:0.9.8e-12.el5.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=i386",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-perl-0:0.9.8e-12.el5.i386",
                        product: {
                           name: "openssl-perl-0:0.9.8e-12.el5.i386",
                           product_id: "openssl-perl-0:0.9.8e-12.el5.i386",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5?arch=i386",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i386",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-0:0.9.8e-12.el5.src",
                        product: {
                           name: "openssl-0:0.9.8e-12.el5.src",
                           product_id: "openssl-0:0.9.8e-12.el5.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=src",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "src",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-debuginfo-0:0.9.8e-12.el5.i686",
                        product: {
                           name: "openssl-debuginfo-0:0.9.8e-12.el5.i686",
                           product_id: "openssl-debuginfo-0:0.9.8e-12.el5.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-0:0.9.8e-12.el5.i686",
                        product: {
                           name: "openssl-0:0.9.8e-12.el5.i686",
                           product_id: "openssl-0:0.9.8e-12.el5.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=i686",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i686",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                        product: {
                           name: "openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                           product_id: "openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=ia64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-0:0.9.8e-12.el5.ia64",
                        product: {
                           name: "openssl-0:0.9.8e-12.el5.ia64",
                           product_id: "openssl-0:0.9.8e-12.el5.ia64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=ia64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-devel-0:0.9.8e-12.el5.ia64",
                        product: {
                           name: "openssl-devel-0:0.9.8e-12.el5.ia64",
                           product_id: "openssl-devel-0:0.9.8e-12.el5.ia64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5?arch=ia64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-perl-0:0.9.8e-12.el5.ia64",
                        product: {
                           name: "openssl-perl-0:0.9.8e-12.el5.ia64",
                           product_id: "openssl-perl-0:0.9.8e-12.el5.ia64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5?arch=ia64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ia64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                        product: {
                           name: "openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                           product_id: "openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=ppc64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-0:0.9.8e-12.el5.ppc64",
                        product: {
                           name: "openssl-0:0.9.8e-12.el5.ppc64",
                           product_id: "openssl-0:0.9.8e-12.el5.ppc64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=ppc64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-devel-0:0.9.8e-12.el5.ppc64",
                        product: {
                           name: "openssl-devel-0:0.9.8e-12.el5.ppc64",
                           product_id: "openssl-devel-0:0.9.8e-12.el5.ppc64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5?arch=ppc64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                        product: {
                           name: "openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                           product_id: "openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=ppc",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-0:0.9.8e-12.el5.ppc",
                        product: {
                           name: "openssl-0:0.9.8e-12.el5.ppc",
                           product_id: "openssl-0:0.9.8e-12.el5.ppc",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=ppc",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-devel-0:0.9.8e-12.el5.ppc",
                        product: {
                           name: "openssl-devel-0:0.9.8e-12.el5.ppc",
                           product_id: "openssl-devel-0:0.9.8e-12.el5.ppc",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5?arch=ppc",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-perl-0:0.9.8e-12.el5.ppc",
                        product: {
                           name: "openssl-perl-0:0.9.8e-12.el5.ppc",
                           product_id: "openssl-perl-0:0.9.8e-12.el5.ppc",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5?arch=ppc",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                        product: {
                           name: "openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                           product_id: "openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-0:0.9.8e-12.el5.s390x",
                        product: {
                           name: "openssl-0:0.9.8e-12.el5.s390x",
                           product_id: "openssl-0:0.9.8e-12.el5.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-devel-0:0.9.8e-12.el5.s390x",
                        product: {
                           name: "openssl-devel-0:0.9.8e-12.el5.s390x",
                           product_id: "openssl-devel-0:0.9.8e-12.el5.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-perl-0:0.9.8e-12.el5.s390x",
                        product: {
                           name: "openssl-perl-0:0.9.8e-12.el5.s390x",
                           product_id: "openssl-perl-0:0.9.8e-12.el5.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-perl@0.9.8e-12.el5?arch=s390x",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-debuginfo-0:0.9.8e-12.el5.s390",
                        product: {
                           name: "openssl-debuginfo-0:0.9.8e-12.el5.s390",
                           product_id: "openssl-debuginfo-0:0.9.8e-12.el5.s390",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debuginfo@0.9.8e-12.el5?arch=s390",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-0:0.9.8e-12.el5.s390",
                        product: {
                           name: "openssl-0:0.9.8e-12.el5.s390",
                           product_id: "openssl-0:0.9.8e-12.el5.s390",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl@0.9.8e-12.el5?arch=s390",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-devel-0:0.9.8e-12.el5.s390",
                        product: {
                           name: "openssl-devel-0:0.9.8e-12.el5.s390",
                           product_id: "openssl-devel-0:0.9.8e-12.el5.s390",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-devel@0.9.8e-12.el5?arch=s390",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.i386",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.i686 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.i686",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.ia64",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.ppc",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.ppc64",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.s390",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.s390x",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.src",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.x86_64",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.i386",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.i686 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.i686",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.s390",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.i386",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.ia64",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.ppc",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.ppc64",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.s390",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.s390x",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.x86_64",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.i386",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.ia64",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.ppc",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.s390x",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
               product_id: "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.x86_64",
            relates_to_product_reference: "5Client-Workstation",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-0:0.9.8e-12.el5.i386",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.i386",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-0:0.9.8e-12.el5.i686",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.i686",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-0:0.9.8e-12.el5.ia64",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.ia64",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-0:0.9.8e-12.el5.ppc",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.ppc",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-0:0.9.8e-12.el5.ppc64",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.ppc64",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-0:0.9.8e-12.el5.s390",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.s390",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-0:0.9.8e-12.el5.s390x",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.s390x",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-0:0.9.8e-12.el5.src",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.src",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-0:0.9.8e-12.el5.x86_64",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.x86_64",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.i386",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.i686 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.i686",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.s390",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.i386",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.ia64",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.ppc",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.ppc64",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.s390",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.s390x",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.x86_64",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.i386",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.ia64",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.ppc",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.s390x",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
               product_id: "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.x86_64",
            relates_to_product_reference: "5Client",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-0:0.9.8e-12.el5.i386",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.i386",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.i686 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-0:0.9.8e-12.el5.i686",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.i686",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-0:0.9.8e-12.el5.ia64",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.ia64",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-0:0.9.8e-12.el5.ppc",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.ppc",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-0:0.9.8e-12.el5.ppc64",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.ppc64",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-0:0.9.8e-12.el5.s390",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.s390",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-0:0.9.8e-12.el5.s390x",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.s390x",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-0:0.9.8e-12.el5.src",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.src",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-0:0.9.8e-12.el5.x86_64",
            },
            product_reference: "openssl-0:0.9.8e-12.el5.x86_64",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.i386",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.i686 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.i686",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.ia64",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.ppc",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.s390",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.s390x",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            },
            product_reference: "openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.i386",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.ia64",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.ppc",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.ppc64 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.ppc64",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.s390 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.s390",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.s390x",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
            },
            product_reference: "openssl-devel-0:0.9.8e-12.el5.x86_64",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.i386",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.ia64",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.ppc",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.s390x",
            relates_to_product_reference: "5Server",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-0:0.9.8e-12.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
               product_id: "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
            },
            product_reference: "openssl-perl-0:0.9.8e-12.el5.x86_64",
            relates_to_product_reference: "5Server",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2006-7250",
         cwe: {
            id: "CWE-476",
            name: "NULL Pointer Dereference",
         },
         discovery_date: "2006-08-29T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "798100",
            },
         ],
         notes: [
            {
               category: "description",
               text: "The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openssl: mime_hdr_cmp NULL dereference crash",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This issue was corrected in Red Hat Enterprise Linux 5 via RHSA-2009:1335. It did not affect openssl packages shipped with Red Hat Enterprise Linux 6.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-0:0.9.8e-12.el5.i386",
               "5Client:openssl-0:0.9.8e-12.el5.i686",
               "5Client:openssl-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-0:0.9.8e-12.el5.s390",
               "5Client:openssl-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-0:0.9.8e-12.el5.src",
               "5Client:openssl-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-0:0.9.8e-12.el5.i386",
               "5Server:openssl-0:0.9.8e-12.el5.i686",
               "5Server:openssl-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-0:0.9.8e-12.el5.s390",
               "5Server:openssl-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-0:0.9.8e-12.el5.src",
               "5Server:openssl-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2006-7250",
            },
            {
               category: "external",
               summary: "RHBZ#798100",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=798100",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2006-7250",
               url: "https://www.cve.org/CVERecord?id=CVE-2006-7250",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2006-7250",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2006-7250",
            },
         ],
         release_date: "2006-08-29T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2009-09-02T08:00:00+00:00",
               details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
               product_ids: [
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-0:0.9.8e-12.el5.src",
                  "5Client:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-0:0.9.8e-12.el5.src",
                  "5Server:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2009:1335",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "LOW",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 5,
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                  version: "2.0",
               },
               products: [
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-0:0.9.8e-12.el5.src",
                  "5Client:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-0:0.9.8e-12.el5.src",
                  "5Server:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "openssl: mime_hdr_cmp NULL dereference crash",
      },
      {
         cve: "CVE-2009-0590",
         discovery_date: "2009-03-25T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "492304",
            },
         ],
         notes: [
            {
               category: "description",
               text: "The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openssl: ASN1 printing crash",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-0:0.9.8e-12.el5.i386",
               "5Client:openssl-0:0.9.8e-12.el5.i686",
               "5Client:openssl-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-0:0.9.8e-12.el5.s390",
               "5Client:openssl-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-0:0.9.8e-12.el5.src",
               "5Client:openssl-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-0:0.9.8e-12.el5.i386",
               "5Server:openssl-0:0.9.8e-12.el5.i686",
               "5Server:openssl-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-0:0.9.8e-12.el5.s390",
               "5Server:openssl-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-0:0.9.8e-12.el5.src",
               "5Server:openssl-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2009-0590",
            },
            {
               category: "external",
               summary: "RHBZ#492304",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=492304",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2009-0590",
               url: "https://www.cve.org/CVERecord?id=CVE-2009-0590",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-0590",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2009-0590",
            },
         ],
         release_date: "2009-03-25T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2009-09-02T08:00:00+00:00",
               details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
               product_ids: [
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-0:0.9.8e-12.el5.src",
                  "5Client:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-0:0.9.8e-12.el5.src",
                  "5Server:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2009:1335",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "HIGH",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 2.6,
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  vectorString: "AV:N/AC:H/Au:N/C:N/I:N/A:P",
                  version: "2.0",
               },
               products: [
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-0:0.9.8e-12.el5.src",
                  "5Client:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-0:0.9.8e-12.el5.src",
                  "5Server:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openssl: ASN1 printing crash",
      },
      {
         cve: "CVE-2009-1377",
         discovery_date: "2009-05-18T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "501253",
            },
         ],
         notes: [
            {
               category: "description",
               text: "The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of \"future epoch\" DTLS records that are buffered in a queue, aka \"DTLS record buffer limitation bug.\"",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "OpenSSL: DTLS epoch record buffer memory DoS",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments. There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-0:0.9.8e-12.el5.i386",
               "5Client:openssl-0:0.9.8e-12.el5.i686",
               "5Client:openssl-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-0:0.9.8e-12.el5.s390",
               "5Client:openssl-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-0:0.9.8e-12.el5.src",
               "5Client:openssl-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-0:0.9.8e-12.el5.i386",
               "5Server:openssl-0:0.9.8e-12.el5.i686",
               "5Server:openssl-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-0:0.9.8e-12.el5.s390",
               "5Server:openssl-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-0:0.9.8e-12.el5.src",
               "5Server:openssl-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2009-1377",
            },
            {
               category: "external",
               summary: "RHBZ#501253",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=501253",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2009-1377",
               url: "https://www.cve.org/CVERecord?id=CVE-2009-1377",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-1377",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2009-1377",
            },
         ],
         release_date: "2009-05-12T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2009-09-02T08:00:00+00:00",
               details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
               product_ids: [
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-0:0.9.8e-12.el5.src",
                  "5Client:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-0:0.9.8e-12.el5.src",
                  "5Server:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2009:1335",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "LOW",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 5,
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                  version: "2.0",
               },
               products: [
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-0:0.9.8e-12.el5.src",
                  "5Client:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-0:0.9.8e-12.el5.src",
                  "5Server:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "OpenSSL: DTLS epoch record buffer memory DoS",
      },
      {
         cve: "CVE-2009-1378",
         discovery_date: "2009-05-18T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "501254",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka \"DTLS fragment handling memory leak.\"",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "OpenSSL: DTLS fragment handling memory DoS",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments. There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-0:0.9.8e-12.el5.i386",
               "5Client:openssl-0:0.9.8e-12.el5.i686",
               "5Client:openssl-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-0:0.9.8e-12.el5.s390",
               "5Client:openssl-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-0:0.9.8e-12.el5.src",
               "5Client:openssl-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-0:0.9.8e-12.el5.i386",
               "5Server:openssl-0:0.9.8e-12.el5.i686",
               "5Server:openssl-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-0:0.9.8e-12.el5.s390",
               "5Server:openssl-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-0:0.9.8e-12.el5.src",
               "5Server:openssl-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2009-1378",
            },
            {
               category: "external",
               summary: "RHBZ#501254",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=501254",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2009-1378",
               url: "https://www.cve.org/CVERecord?id=CVE-2009-1378",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-1378",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2009-1378",
            },
         ],
         release_date: "2009-05-12T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2009-09-02T08:00:00+00:00",
               details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
               product_ids: [
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-0:0.9.8e-12.el5.src",
                  "5Client:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-0:0.9.8e-12.el5.src",
                  "5Server:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2009:1335",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "LOW",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 5,
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                  version: "2.0",
               },
               products: [
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-0:0.9.8e-12.el5.src",
                  "5Client:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-0:0.9.8e-12.el5.src",
                  "5Server:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "OpenSSL: DTLS fragment handling memory DoS",
      },
      {
         cve: "CVE-2009-1379",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         discovery_date: "2009-05-18T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "501572",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "OpenSSL: DTLS pointer use-after-free flaw (DoS)",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This issue did not affect versions of openssl as shipped in Red Hat Enterprise Linux 3 and 4.\n\nNote that both the DTLS specification and OpenSSLs implementation is still in development and unlikely to be used in production environments. There is no component shipped in Red Hat Enterprise Linux 5 using OpenSSLs DTLS implementation, except for OpenSSLs testing command line client - openssl.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-0:0.9.8e-12.el5.i386",
               "5Client:openssl-0:0.9.8e-12.el5.i686",
               "5Client:openssl-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-0:0.9.8e-12.el5.s390",
               "5Client:openssl-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-0:0.9.8e-12.el5.src",
               "5Client:openssl-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-0:0.9.8e-12.el5.i386",
               "5Server:openssl-0:0.9.8e-12.el5.i686",
               "5Server:openssl-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-0:0.9.8e-12.el5.s390",
               "5Server:openssl-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-0:0.9.8e-12.el5.src",
               "5Server:openssl-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2009-1379",
            },
            {
               category: "external",
               summary: "RHBZ#501572",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=501572",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2009-1379",
               url: "https://www.cve.org/CVERecord?id=CVE-2009-1379",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-1379",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2009-1379",
            },
         ],
         release_date: "2009-05-11T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2009-09-02T08:00:00+00:00",
               details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
               product_ids: [
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-0:0.9.8e-12.el5.src",
                  "5Client:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-0:0.9.8e-12.el5.src",
                  "5Server:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2009:1335",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "LOW",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 5,
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                  version: "2.0",
               },
               products: [
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-0:0.9.8e-12.el5.src",
                  "5Client:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-0:0.9.8e-12.el5.src",
                  "5Server:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "OpenSSL: DTLS pointer use-after-free flaw (DoS)",
      },
      {
         cve: "CVE-2009-1386",
         cwe: {
            id: "CWE-476",
            name: "NULL Pointer Dereference",
         },
         discovery_date: "2009-06-01T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "503685",
            },
         ],
         notes: [
            {
               category: "description",
               text: "ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openssl: DTLS NULL deref crash on early ChangeCipherSpec request",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-0:0.9.8e-12.el5.i386",
               "5Client:openssl-0:0.9.8e-12.el5.i686",
               "5Client:openssl-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-0:0.9.8e-12.el5.s390",
               "5Client:openssl-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-0:0.9.8e-12.el5.src",
               "5Client:openssl-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-0:0.9.8e-12.el5.i386",
               "5Server:openssl-0:0.9.8e-12.el5.i686",
               "5Server:openssl-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-0:0.9.8e-12.el5.s390",
               "5Server:openssl-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-0:0.9.8e-12.el5.src",
               "5Server:openssl-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2009-1386",
            },
            {
               category: "external",
               summary: "RHBZ#503685",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=503685",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2009-1386",
               url: "https://www.cve.org/CVERecord?id=CVE-2009-1386",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-1386",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2009-1386",
            },
         ],
         release_date: "2009-06-02T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2009-09-02T08:00:00+00:00",
               details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
               product_ids: [
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-0:0.9.8e-12.el5.src",
                  "5Client:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-0:0.9.8e-12.el5.src",
                  "5Server:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2009:1335",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "LOW",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 5,
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                  version: "2.0",
               },
               products: [
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-0:0.9.8e-12.el5.src",
                  "5Client:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-0:0.9.8e-12.el5.src",
                  "5Server:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "openssl: DTLS NULL deref crash on early ChangeCipherSpec request",
      },
      {
         cve: "CVE-2009-1387",
         cwe: {
            id: "CWE-476",
            name: "NULL Pointer Dereference",
         },
         discovery_date: "2009-06-01T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "503688",
            },
         ],
         notes: [
            {
               category: "description",
               text: "The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a \"fragment bug.\"",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openssl: DTLS out-of-sequence message handling NULL deref DoS",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
               "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-0:0.9.8e-12.el5.i386",
               "5Client:openssl-0:0.9.8e-12.el5.i686",
               "5Client:openssl-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-0:0.9.8e-12.el5.s390",
               "5Client:openssl-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-0:0.9.8e-12.el5.src",
               "5Client:openssl-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-0:0.9.8e-12.el5.i386",
               "5Server:openssl-0:0.9.8e-12.el5.i686",
               "5Server:openssl-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-0:0.9.8e-12.el5.s390",
               "5Server:openssl-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-0:0.9.8e-12.el5.src",
               "5Server:openssl-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
               "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
               "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
               "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
               "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
               "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
               "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
               "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2009-1387",
            },
            {
               category: "external",
               summary: "RHBZ#503688",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=503688",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2009-1387",
               url: "https://www.cve.org/CVERecord?id=CVE-2009-1387",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2009-1387",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2009-1387",
            },
         ],
         release_date: "2009-06-02T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2009-09-02T08:00:00+00:00",
               details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
               product_ids: [
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-0:0.9.8e-12.el5.src",
                  "5Client:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-0:0.9.8e-12.el5.src",
                  "5Server:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2009:1335",
            },
         ],
         scores: [
            {
               cvss_v2: {
                  accessComplexity: "LOW",
                  accessVector: "NETWORK",
                  authentication: "NONE",
                  availabilityImpact: "PARTIAL",
                  baseScore: 5,
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                  version: "2.0",
               },
               products: [
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.src",
                  "5Client-Workstation:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client-Workstation:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-0:0.9.8e-12.el5.src",
                  "5Client:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Client:openssl-perl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-0:0.9.8e-12.el5.src",
                  "5Server:openssl-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.i686",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-debuginfo-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.ppc64",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-devel-0:0.9.8e-12.el5.x86_64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.i386",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ia64",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.ppc",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.s390x",
                  "5Server:openssl-perl-0:0.9.8e-12.el5.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "openssl: DTLS out-of-sequence message handling NULL deref DoS",
      },
   ],
}

cve-2009-1378

Vulnerability from cvelistv5

Published

2009-05-19 19:00

Modified

2024-08-07 05:13

Severity ?

Summary

Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak."

References

▼	URL	Tags
	http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest	x_refsource_CONFIRM
	http://secunia.com/advisories/42724	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7229	vdb-entry, signature, x_refsource_OVAL
	http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049	vendor-advisory, x_refsource_SLACKWARE
	http://secunia.com/advisories/38794	third-party-advisory, x_refsource_SECUNIA
	http://lists.vmware.com/pipermail/security-announce/2010/000082.html	mailing-list, x_refsource_MLIST
	https://www.exploit-db.com/exploits/8720	exploit, x_refsource_EXPLOIT-DB
	http://www.vupen.com/english/advisories/2009/1377	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11309	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/35729	third-party-advisory, x_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200912-01.xml	vendor-advisory, x_refsource_GENTOO
	http://www.redhat.com/support/errata/RHSA-2009-1335.html	vendor-advisory, x_refsource_REDHAT
	http://cvs.openssl.org/chngview?cn=18188	x_refsource_CONFIRM
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/38761	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37003	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=openssl-dev&m=124263491424212&w=2	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/36533	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1022241	vdb-entry, x_refsource_SECTRACK
	http://www.ubuntu.com/usn/USN-792-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html	vendor-advisory, x_refsource_SUSE
	http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2009/05/18/1	mailing-list, x_refsource_MLIST
	https://launchpad.net/bugs/cve/2009-1378	x_refsource_MISC
	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc	vendor-advisory, x_refsource_NETBSD
	http://www.securityfocus.com/bid/35001	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/38834	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:120	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/35461	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35128	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35571	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35416	third-party-advisory, x_refsource_SECUNIA
	http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net	x_refsource_CONFIRM
	https://kb.bluecoat.com/index?page=content&id=SA50	x_refsource_CONFIRM
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://marc.info/?l=openssl-dev&m=124247679213944&w=2	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/42733	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0528	vdb-entry, x_refsource_VUPEN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-07T05:13:25.511Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest",
               },
               {
                  name: "42724",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/42724",
               },
               {
                  name: "oval:org.mitre.oval:def:7229",
                  tags: [
                     "vdb-entry",
                     "signature",
                     "x_refsource_OVAL",
                     "x_transferred",
                  ],
                  url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7229",
               },
               {
                  name: "SSA:2010-060-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SLACKWARE",
                     "x_transferred",
                  ],
                  url: "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049",
               },
               {
                  name: "38794",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38794",
               },
               {
                  name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
               },
               {
                  name: "8720",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/8720",
               },
               {
                  name: "ADV-2009-1377",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2009/1377",
               },
               {
                  name: "oval:org.mitre.oval:def:11309",
                  tags: [
                     "vdb-entry",
                     "signature",
                     "x_refsource_OVAL",
                     "x_transferred",
                  ],
                  url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11309",
               },
               {
                  name: "35729",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35729",
               },
               {
                  name: "GLSA-200912-01",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "http://security.gentoo.org/glsa/glsa-200912-01.xml",
               },
               {
                  name: "RHSA-2009:1335",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://cvs.openssl.org/chngview?cn=18188",
               },
               {
                  name: "HPSBMA02492",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
               },
               {
                  name: "38761",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38761",
               },
               {
                  name: "37003",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/37003",
               },
               {
                  name: "[openssl-dev] 20090518 Re: [openssl.org #1931] [PATCH] DTLS fragment handling memory leak",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=openssl-dev&m=124263491424212&w=2",
               },
               {
                  name: "36533",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/36533",
               },
               {
                  name: "1022241",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id?1022241",
               },
               {
                  name: "USN-792-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-792-1",
               },
               {
                  name: "SUSE-SR:2009:011",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
               },
               {
                  name: "[oss-security] 20090518 Two OpenSSL DTLS remote DoS",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2009/05/18/1",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://launchpad.net/bugs/cve/2009-1378",
               },
               {
                  name: "NetBSD-SA2009-009",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_NETBSD",
                     "x_transferred",
                  ],
                  url: "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
               },
               {
                  name: "35001",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/35001",
               },
               {
                  name: "38834",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38834",
               },
               {
                  name: "MDVSA-2009:120",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_MANDRIVA",
                     "x_transferred",
                  ],
                  url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:120",
               },
               {
                  name: "35461",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35461",
               },
               {
                  name: "35128",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35128",
               },
               {
                  name: "35571",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35571",
               },
               {
                  name: "35416",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35416",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kb.bluecoat.com/index?page=content&id=SA50",
               },
               {
                  name: "SSRT100079",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
               },
               {
                  name: "[openssl-dev] 20090516 [openssl.org #1931] [PATCH] DTLS fragment handling memory leak",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=openssl-dev&m=124247679213944&w=2",
               },
               {
                  name: "42733",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/42733",
               },
               {
                  name: "ADV-2010-0528",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2010/0528",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2009-05-18T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka \"DTLS fragment handling memory leak.\"",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-28T12:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest",
            },
            {
               name: "42724",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/42724",
            },
            {
               name: "oval:org.mitre.oval:def:7229",
               tags: [
                  "vdb-entry",
                  "signature",
                  "x_refsource_OVAL",
               ],
               url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7229",
            },
            {
               name: "SSA:2010-060-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SLACKWARE",
               ],
               url: "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049",
            },
            {
               name: "38794",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38794",
            },
            {
               name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
            },
            {
               name: "8720",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/8720",
            },
            {
               name: "ADV-2009-1377",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2009/1377",
            },
            {
               name: "oval:org.mitre.oval:def:11309",
               tags: [
                  "vdb-entry",
                  "signature",
                  "x_refsource_OVAL",
               ],
               url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11309",
            },
            {
               name: "35729",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35729",
            },
            {
               name: "GLSA-200912-01",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "http://security.gentoo.org/glsa/glsa-200912-01.xml",
            },
            {
               name: "RHSA-2009:1335",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://cvs.openssl.org/chngview?cn=18188",
            },
            {
               name: "HPSBMA02492",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
            },
            {
               name: "38761",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38761",
            },
            {
               name: "37003",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/37003",
            },
            {
               name: "[openssl-dev] 20090518 Re: [openssl.org #1931] [PATCH] DTLS fragment handling memory leak",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://marc.info/?l=openssl-dev&m=124263491424212&w=2",
            },
            {
               name: "36533",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/36533",
            },
            {
               name: "1022241",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id?1022241",
            },
            {
               name: "USN-792-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-792-1",
            },
            {
               name: "SUSE-SR:2009:011",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
            },
            {
               name: "[oss-security] 20090518 Two OpenSSL DTLS remote DoS",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2009/05/18/1",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://launchpad.net/bugs/cve/2009-1378",
            },
            {
               name: "NetBSD-SA2009-009",
               tags: [
                  "vendor-advisory",
                  "x_refsource_NETBSD",
               ],
               url: "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
            },
            {
               name: "35001",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/35001",
            },
            {
               name: "38834",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38834",
            },
            {
               name: "MDVSA-2009:120",
               tags: [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
               ],
               url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:120",
            },
            {
               name: "35461",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35461",
            },
            {
               name: "35128",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35128",
            },
            {
               name: "35571",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35571",
            },
            {
               name: "35416",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35416",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kb.bluecoat.com/index?page=content&id=SA50",
            },
            {
               name: "SSRT100079",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
            },
            {
               name: "[openssl-dev] 20090516 [openssl.org #1931] [PATCH] DTLS fragment handling memory leak",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://marc.info/?l=openssl-dev&m=124247679213944&w=2",
            },
            {
               name: "42733",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/42733",
            },
            {
               name: "ADV-2010-0528",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2010/0528",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2009-1378",
      datePublished: "2009-05-19T19:00:00",
      dateReserved: "2009-04-23T00:00:00",
      dateUpdated: "2024-08-07T05:13:25.511Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2009-1379

Vulnerability from cvelistv5

Published

2009-05-19 19:00

Modified

2024-08-07 05:13

Severity ?

Summary

Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate.

References

▼	URL	Tags
	http://secunia.com/advisories/42724	third-party-advisory, x_refsource_SECUNIA
	https://launchpad.net/bugs/cve/2009-1379	x_refsource_MISC
	http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049	vendor-advisory, x_refsource_SLACKWARE
	http://secunia.com/advisories/38794	third-party-advisory, x_refsource_SECUNIA
	http://lists.vmware.com/pipermail/security-announce/2010/000082.html	mailing-list, x_refsource_MLIST
	http://www.vupen.com/english/advisories/2009/1377	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35729	third-party-advisory, x_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200912-01.xml	vendor-advisory, x_refsource_GENTOO
	http://www.redhat.com/support/errata/RHSA-2009-1335.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/38761	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37003	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36533	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1022241	vdb-entry, x_refsource_SECTRACK
	http://www.ubuntu.com/usn/USN-792-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9744	vdb-entry, signature, x_refsource_OVAL
	https://exchange.xforce.ibmcloud.com/vulnerabilities/50661	vdb-entry, x_refsource_XF
	http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/35138	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2009/05/18/4	mailing-list, x_refsource_MLIST
	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc	vendor-advisory, x_refsource_NETBSD
	http://secunia.com/advisories/38834	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35461	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35571	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6848	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/35416	third-party-advisory, x_refsource_SECUNIA
	http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net	x_refsource_CONFIRM
	https://kb.bluecoat.com/index?page=content&id=SA50	x_refsource_CONFIRM
	http://rt.openssl.org/Ticket/Display.html?id=1923&user=guest&pass=guest	x_refsource_CONFIRM
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/42733	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0528	vdb-entry, x_refsource_VUPEN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-07T05:13:25.560Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "42724",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/42724",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://launchpad.net/bugs/cve/2009-1379",
               },
               {
                  name: "SSA:2010-060-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SLACKWARE",
                     "x_transferred",
                  ],
                  url: "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049",
               },
               {
                  name: "38794",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38794",
               },
               {
                  name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
               },
               {
                  name: "ADV-2009-1377",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2009/1377",
               },
               {
                  name: "35729",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35729",
               },
               {
                  name: "GLSA-200912-01",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "http://security.gentoo.org/glsa/glsa-200912-01.xml",
               },
               {
                  name: "RHSA-2009:1335",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
               },
               {
                  name: "HPSBMA02492",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
               },
               {
                  name: "38761",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38761",
               },
               {
                  name: "37003",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/37003",
               },
               {
                  name: "36533",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/36533",
               },
               {
                  name: "1022241",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id?1022241",
               },
               {
                  name: "USN-792-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-792-1",
               },
               {
                  name: "SUSE-SR:2009:011",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
               },
               {
                  name: "oval:org.mitre.oval:def:9744",
                  tags: [
                     "vdb-entry",
                     "signature",
                     "x_refsource_OVAL",
                     "x_transferred",
                  ],
                  url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9744",
               },
               {
                  name: "openssl-dtls1retrievebufferedfragment-dos(50661)",
                  tags: [
                     "vdb-entry",
                     "x_refsource_XF",
                     "x_transferred",
                  ],
                  url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/50661",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
               },
               {
                  name: "35138",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/35138",
               },
               {
                  name: "[oss-security] 20090518 Re: Two OpenSSL DTLS remote DoS",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2009/05/18/4",
               },
               {
                  name: "NetBSD-SA2009-009",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_NETBSD",
                     "x_transferred",
                  ],
                  url: "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
               },
               {
                  name: "38834",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38834",
               },
               {
                  name: "35461",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35461",
               },
               {
                  name: "35571",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35571",
               },
               {
                  name: "oval:org.mitre.oval:def:6848",
                  tags: [
                     "vdb-entry",
                     "signature",
                     "x_refsource_OVAL",
                     "x_transferred",
                  ],
                  url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6848",
               },
               {
                  name: "35416",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35416",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kb.bluecoat.com/index?page=content&id=SA50",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://rt.openssl.org/Ticket/Display.html?id=1923&user=guest&pass=guest",
               },
               {
                  name: "SSRT100079",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
               },
               {
                  name: "42733",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/42733",
               },
               {
                  name: "ADV-2010-0528",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2010/0528",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2009-05-18T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-28T12:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "42724",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/42724",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://launchpad.net/bugs/cve/2009-1379",
            },
            {
               name: "SSA:2010-060-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SLACKWARE",
               ],
               url: "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049",
            },
            {
               name: "38794",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38794",
            },
            {
               name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
            },
            {
               name: "ADV-2009-1377",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2009/1377",
            },
            {
               name: "35729",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35729",
            },
            {
               name: "GLSA-200912-01",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "http://security.gentoo.org/glsa/glsa-200912-01.xml",
            },
            {
               name: "RHSA-2009:1335",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
            },
            {
               name: "HPSBMA02492",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
            },
            {
               name: "38761",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38761",
            },
            {
               name: "37003",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/37003",
            },
            {
               name: "36533",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/36533",
            },
            {
               name: "1022241",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id?1022241",
            },
            {
               name: "USN-792-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-792-1",
            },
            {
               name: "SUSE-SR:2009:011",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
            },
            {
               name: "oval:org.mitre.oval:def:9744",
               tags: [
                  "vdb-entry",
                  "signature",
                  "x_refsource_OVAL",
               ],
               url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9744",
            },
            {
               name: "openssl-dtls1retrievebufferedfragment-dos(50661)",
               tags: [
                  "vdb-entry",
                  "x_refsource_XF",
               ],
               url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/50661",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
            },
            {
               name: "35138",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/35138",
            },
            {
               name: "[oss-security] 20090518 Re: Two OpenSSL DTLS remote DoS",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2009/05/18/4",
            },
            {
               name: "NetBSD-SA2009-009",
               tags: [
                  "vendor-advisory",
                  "x_refsource_NETBSD",
               ],
               url: "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
            },
            {
               name: "38834",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38834",
            },
            {
               name: "35461",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35461",
            },
            {
               name: "35571",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35571",
            },
            {
               name: "oval:org.mitre.oval:def:6848",
               tags: [
                  "vdb-entry",
                  "signature",
                  "x_refsource_OVAL",
               ],
               url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6848",
            },
            {
               name: "35416",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35416",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kb.bluecoat.com/index?page=content&id=SA50",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://rt.openssl.org/Ticket/Display.html?id=1923&user=guest&pass=guest",
            },
            {
               name: "SSRT100079",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
            },
            {
               name: "42733",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/42733",
            },
            {
               name: "ADV-2010-0528",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2010/0528",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2009-1379",
      datePublished: "2009-05-19T19:00:00",
      dateReserved: "2009-04-23T00:00:00",
      dateUpdated: "2024-08-07T05:13:25.560Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2009-1377

Vulnerability from cvelistv5

Published

2009-05-19 19:00

Modified

2024-08-07 05:13

Severity ?

Summary

The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer limitation bug."

References

▼	URL	Tags
	http://secunia.com/advisories/42724	third-party-advisory, x_refsource_SECUNIA
	http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest	x_refsource_CONFIRM
	http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049	vendor-advisory, x_refsource_SLACKWARE
	http://secunia.com/advisories/38794	third-party-advisory, x_refsource_SECUNIA
	http://lists.vmware.com/pipermail/security-announce/2010/000082.html	mailing-list, x_refsource_MLIST
	http://www.vupen.com/english/advisories/2009/1377	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35729	third-party-advisory, x_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200912-01.xml	vendor-advisory, x_refsource_GENTOO
	http://www.redhat.com/support/errata/RHSA-2009-1335.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/38761	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/37003	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663	vdb-entry, signature, x_refsource_OVAL
	https://launchpad.net/bugs/cve/2009-1377	x_refsource_MISC
	http://secunia.com/advisories/36533	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1022241	vdb-entry, x_refsource_SECTRACK
	http://www.ubuntu.com/usn/USN-792-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html	vendor-advisory, x_refsource_SUSE
	http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2009/05/18/1	mailing-list, x_refsource_MLIST
	http://marc.info/?l=openssl-dev&m=124247675613888&w=2	mailing-list, x_refsource_MLIST
	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc	vendor-advisory, x_refsource_NETBSD
	http://www.securityfocus.com/bid/35001	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/38834	third-party-advisory, x_refsource_SECUNIA
	http://cvs.openssl.org/chngview?cn=18187	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:120	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/35461	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35128	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35571	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35416	third-party-advisory, x_refsource_SECUNIA
	http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net	x_refsource_CONFIRM
	https://kb.bluecoat.com/index?page=content&id=SA50	x_refsource_CONFIRM
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/42733	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0528	vdb-entry, x_refsource_VUPEN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-07T05:13:25.060Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "42724",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/42724",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest",
               },
               {
                  name: "SSA:2010-060-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SLACKWARE",
                     "x_transferred",
                  ],
                  url: "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049",
               },
               {
                  name: "38794",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38794",
               },
               {
                  name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
               },
               {
                  name: "ADV-2009-1377",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2009/1377",
               },
               {
                  name: "35729",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35729",
               },
               {
                  name: "GLSA-200912-01",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "http://security.gentoo.org/glsa/glsa-200912-01.xml",
               },
               {
                  name: "RHSA-2009:1335",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
               },
               {
                  name: "HPSBMA02492",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
               },
               {
                  name: "38761",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38761",
               },
               {
                  name: "37003",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/37003",
               },
               {
                  name: "oval:org.mitre.oval:def:9663",
                  tags: [
                     "vdb-entry",
                     "signature",
                     "x_refsource_OVAL",
                     "x_transferred",
                  ],
                  url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://launchpad.net/bugs/cve/2009-1377",
               },
               {
                  name: "36533",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/36533",
               },
               {
                  name: "1022241",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id?1022241",
               },
               {
                  name: "USN-792-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-792-1",
               },
               {
                  name: "SUSE-SR:2009:011",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
               },
               {
                  name: "[oss-security] 20090518 Two OpenSSL DTLS remote DoS",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2009/05/18/1",
               },
               {
                  name: "[openssl-dev] 20090516 [openssl.org #1930] [PATCH] DTLS record buffer limitation bug",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=openssl-dev&m=124247675613888&w=2",
               },
               {
                  name: "NetBSD-SA2009-009",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_NETBSD",
                     "x_transferred",
                  ],
                  url: "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
               },
               {
                  name: "35001",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/35001",
               },
               {
                  name: "oval:org.mitre.oval:def:6683",
                  tags: [
                     "vdb-entry",
                     "signature",
                     "x_refsource_OVAL",
                     "x_transferred",
                  ],
                  url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683",
               },
               {
                  name: "38834",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38834",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://cvs.openssl.org/chngview?cn=18187",
               },
               {
                  name: "MDVSA-2009:120",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_MANDRIVA",
                     "x_transferred",
                  ],
                  url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:120",
               },
               {
                  name: "35461",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35461",
               },
               {
                  name: "35128",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35128",
               },
               {
                  name: "35571",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35571",
               },
               {
                  name: "35416",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35416",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kb.bluecoat.com/index?page=content&id=SA50",
               },
               {
                  name: "SSRT100079",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
               },
               {
                  name: "42733",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/42733",
               },
               {
                  name: "ADV-2010-0528",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2010/0528",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2009-05-18T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of \"future epoch\" DTLS records that are buffered in a queue, aka \"DTLS record buffer limitation bug.\"",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-28T12:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "42724",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/42724",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://rt.openssl.org/Ticket/Display.html?id=1930&user=guest&pass=guest",
            },
            {
               name: "SSA:2010-060-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SLACKWARE",
               ],
               url: "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.663049",
            },
            {
               name: "38794",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38794",
            },
            {
               name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
            },
            {
               name: "ADV-2009-1377",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2009/1377",
            },
            {
               name: "35729",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35729",
            },
            {
               name: "GLSA-200912-01",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "http://security.gentoo.org/glsa/glsa-200912-01.xml",
            },
            {
               name: "RHSA-2009:1335",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
            },
            {
               name: "HPSBMA02492",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
            },
            {
               name: "38761",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38761",
            },
            {
               name: "37003",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/37003",
            },
            {
               name: "oval:org.mitre.oval:def:9663",
               tags: [
                  "vdb-entry",
                  "signature",
                  "x_refsource_OVAL",
               ],
               url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9663",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://launchpad.net/bugs/cve/2009-1377",
            },
            {
               name: "36533",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/36533",
            },
            {
               name: "1022241",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id?1022241",
            },
            {
               name: "USN-792-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-792-1",
            },
            {
               name: "SUSE-SR:2009:011",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
            },
            {
               name: "[oss-security] 20090518 Two OpenSSL DTLS remote DoS",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2009/05/18/1",
            },
            {
               name: "[openssl-dev] 20090516 [openssl.org #1930] [PATCH] DTLS record buffer limitation bug",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://marc.info/?l=openssl-dev&m=124247675613888&w=2",
            },
            {
               name: "NetBSD-SA2009-009",
               tags: [
                  "vendor-advisory",
                  "x_refsource_NETBSD",
               ],
               url: "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
            },
            {
               name: "35001",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/35001",
            },
            {
               name: "oval:org.mitre.oval:def:6683",
               tags: [
                  "vdb-entry",
                  "signature",
                  "x_refsource_OVAL",
               ],
               url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6683",
            },
            {
               name: "38834",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38834",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://cvs.openssl.org/chngview?cn=18187",
            },
            {
               name: "MDVSA-2009:120",
               tags: [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
               ],
               url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:120",
            },
            {
               name: "35461",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35461",
            },
            {
               name: "35128",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35128",
            },
            {
               name: "35571",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35571",
            },
            {
               name: "35416",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35416",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kb.bluecoat.com/index?page=content&id=SA50",
            },
            {
               name: "SSRT100079",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
            },
            {
               name: "42733",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/42733",
            },
            {
               name: "ADV-2010-0528",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2010/0528",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2009-1377",
      datePublished: "2009-05-19T19:00:00",
      dateReserved: "2009-04-23T00:00:00",
      dateUpdated: "2024-08-07T05:13:25.060Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2009-1387

Vulnerability from cvelistv5

Published

2009-06-04 16:00

Modified

2024-08-07 05:13

Severity ?

Summary

The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug."

References

▼	URL	Tags
	http://secunia.com/advisories/38794	third-party-advisory, x_refsource_SECUNIA
	http://lists.vmware.com/pipermail/security-announce/2010/000082.html	mailing-list, x_refsource_MLIST
	http://cvs.openssl.org/chngview?cn=17958	x_refsource_CONFIRM
	http://secunia.com/advisories/35729	third-party-advisory, x_refsource_SECUNIA
	http://security.gentoo.org/glsa/glsa-200912-01.xml	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2009/06/02/1	mailing-list, x_refsource_MLIST
	http://www.redhat.com/support/errata/RHSA-2009-1335.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/37003	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/36533	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-792-1	vendor-advisory, x_refsource_UBUNTU
	http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592	vdb-entry, signature, x_refsource_OVAL
	http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html	x_refsource_CONFIRM
	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc	vendor-advisory, x_refsource_NETBSD
	http://secunia.com/advisories/38834	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35571	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740	vdb-entry, signature, x_refsource_OVAL
	http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net	x_refsource_CONFIRM
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://www.vupen.com/english/advisories/2010/0528	vdb-entry, x_refsource_VUPEN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-07T05:13:25.436Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "38794",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38794",
               },
               {
                  name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://cvs.openssl.org/chngview?cn=17958",
               },
               {
                  name: "35729",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35729",
               },
               {
                  name: "GLSA-200912-01",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "http://security.gentoo.org/glsa/glsa-200912-01.xml",
               },
               {
                  name: "[oss-security] 20090602 Re: Two OpenSSL DTLS remote DoS",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2009/06/02/1",
               },
               {
                  name: "RHSA-2009:1335",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
               },
               {
                  name: "HPSBMA02492",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
               },
               {
                  name: "37003",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/37003",
               },
               {
                  name: "36533",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/36533",
               },
               {
                  name: "USN-792-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-792-1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest",
               },
               {
                  name: "oval:org.mitre.oval:def:7592",
                  tags: [
                     "vdb-entry",
                     "signature",
                     "x_refsource_OVAL",
                     "x_transferred",
                  ],
                  url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
               },
               {
                  name: "NetBSD-SA2009-009",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_NETBSD",
                     "x_transferred",
                  ],
                  url: "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
               },
               {
                  name: "38834",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38834",
               },
               {
                  name: "35685",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35685",
               },
               {
                  name: "35571",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35571",
               },
               {
                  name: "SUSE-SR:2009:012",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
               },
               {
                  name: "oval:org.mitre.oval:def:10740",
                  tags: [
                     "vdb-entry",
                     "signature",
                     "x_refsource_OVAL",
                     "x_transferred",
                  ],
                  url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
               },
               {
                  name: "SSRT100079",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
               },
               {
                  name: "ADV-2010-0528",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2010/0528",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2009-06-02T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a \"fragment bug.\"",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-28T12:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "38794",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38794",
            },
            {
               name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://cvs.openssl.org/chngview?cn=17958",
            },
            {
               name: "35729",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35729",
            },
            {
               name: "GLSA-200912-01",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "http://security.gentoo.org/glsa/glsa-200912-01.xml",
            },
            {
               name: "[oss-security] 20090602 Re: Two OpenSSL DTLS remote DoS",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2009/06/02/1",
            },
            {
               name: "RHSA-2009:1335",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
            },
            {
               name: "HPSBMA02492",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
            },
            {
               name: "37003",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/37003",
            },
            {
               name: "36533",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/36533",
            },
            {
               name: "USN-792-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-792-1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest",
            },
            {
               name: "oval:org.mitre.oval:def:7592",
               tags: [
                  "vdb-entry",
                  "signature",
                  "x_refsource_OVAL",
               ],
               url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
            },
            {
               name: "NetBSD-SA2009-009",
               tags: [
                  "vendor-advisory",
                  "x_refsource_NETBSD",
               ],
               url: "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
            },
            {
               name: "38834",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38834",
            },
            {
               name: "35685",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35685",
            },
            {
               name: "35571",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35571",
            },
            {
               name: "SUSE-SR:2009:012",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
            },
            {
               name: "oval:org.mitre.oval:def:10740",
               tags: [
                  "vdb-entry",
                  "signature",
                  "x_refsource_OVAL",
               ],
               url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
            },
            {
               name: "SSRT100079",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
            },
            {
               name: "ADV-2010-0528",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2010/0528",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2009-1387",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a \"fragment bug.\"",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "38794",
                     refsource: "SECUNIA",
                     url: "http://secunia.com/advisories/38794",
                  },
                  {
                     name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
                     refsource: "MLIST",
                     url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
                  },
                  {
                     name: "http://cvs.openssl.org/chngview?cn=17958",
                     refsource: "CONFIRM",
                     url: "http://cvs.openssl.org/chngview?cn=17958",
                  },
                  {
                     name: "35729",
                     refsource: "SECUNIA",
                     url: "http://secunia.com/advisories/35729",
                  },
                  {
                     name: "GLSA-200912-01",
                     refsource: "GENTOO",
                     url: "http://security.gentoo.org/glsa/glsa-200912-01.xml",
                  },
                  {
                     name: "[oss-security] 20090602 Re: Two OpenSSL DTLS remote DoS",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2009/06/02/1",
                  },
                  {
                     name: "RHSA-2009:1335",
                     refsource: "REDHAT",
                     url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
                  },
                  {
                     name: "HPSBMA02492",
                     refsource: "HP",
                     url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
                  },
                  {
                     name: "37003",
                     refsource: "SECUNIA",
                     url: "http://secunia.com/advisories/37003",
                  },
                  {
                     name: "36533",
                     refsource: "SECUNIA",
                     url: "http://secunia.com/advisories/36533",
                  },
                  {
                     name: "USN-792-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-792-1",
                  },
                  {
                     name: "http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest",
                     refsource: "CONFIRM",
                     url: "http://rt.openssl.org/Ticket/Display.html?id=1838&user=guest&pass=guest",
                  },
                  {
                     name: "oval:org.mitre.oval:def:7592",
                     refsource: "OVAL",
                     url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7592",
                  },
                  {
                     name: "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
                     refsource: "CONFIRM",
                     url: "http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html",
                  },
                  {
                     name: "NetBSD-SA2009-009",
                     refsource: "NETBSD",
                     url: "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
                  },
                  {
                     name: "38834",
                     refsource: "SECUNIA",
                     url: "http://secunia.com/advisories/38834",
                  },
                  {
                     name: "35685",
                     refsource: "SECUNIA",
                     url: "http://secunia.com/advisories/35685",
                  },
                  {
                     name: "35571",
                     refsource: "SECUNIA",
                     url: "http://secunia.com/advisories/35571",
                  },
                  {
                     name: "SUSE-SR:2009:012",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
                  },
                  {
                     name: "oval:org.mitre.oval:def:10740",
                     refsource: "OVAL",
                     url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10740",
                  },
                  {
                     name: "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
                     refsource: "CONFIRM",
                     url: "http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net",
                  },
                  {
                     name: "SSRT100079",
                     refsource: "HP",
                     url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
                  },
                  {
                     name: "ADV-2010-0528",
                     refsource: "VUPEN",
                     url: "http://www.vupen.com/english/advisories/2010/0528",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2009-1387",
      datePublished: "2009-06-04T16:00:00",
      dateReserved: "2009-04-23T00:00:00",
      dateUpdated: "2024-08-07T05:13:25.436Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2009-0590

Vulnerability from cvelistv5

Published

2009-03-27 16:00

Modified

2024-08-07 04:40

Severity ?

Summary

The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.

References

▼	URL	Tags
	http://marc.info/?l=bugtraq&m=124464882609472&w=2	vendor-advisory, x_refsource_HP
	http://www.vupen.com/english/advisories/2009/0850	vdb-entry, x_refsource_VUPEN
	http://securitytracker.com/id?1021905	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/34896	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDVSA-2009:087	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2009/1175	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/42724	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/502429/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html	vendor-advisory, x_refsource_SUSE
	http://wiki.rpath.com/Advisories:rPSA-2009-0057	x_refsource_CONFIRM
	http://www.debian.org/security/2009/dsa-1763	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/38794	third-party-advisory, x_refsource_SECUNIA
	http://lists.vmware.com/pipermail/security-announce/2010/000082.html	mailing-list, x_refsource_MLIST
	http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847	x_refsource_CONFIRM
	http://secunia.com/advisories/34960	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html	vendor-advisory, x_refsource_SUSE
	http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057	x_refsource_MISC
	http://secunia.com/advisories/34666	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-750-1	vendor-advisory, x_refsource_UBUNTU
	http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc	vendor-advisory, x_refsource_FREEBSD
	http://marc.info/?l=bugtraq&m=124464882609472&w=2	vendor-advisory, x_refsource_HP
	http://www.vupen.com/english/advisories/2009/1020	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/35729	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2009-1335.html	vendor-advisory, x_refsource_REDHAT
	http://www.osvdb.org/52864	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/34561	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/35380	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=bugtraq&m=127678688104458&w=2	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/42467	third-party-advisory, x_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html	vendor-advisory, x_refsource_APPLE
	http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
	https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html	mailing-list, x_refsource_MLIST
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/36533	third-party-advisory, x_refsource_SECUNIA
	http://www.php.net/archive/2009.php#id2009-04-08-1	x_refsource_CONFIRM
	http://secunia.com/advisories/34411	third-party-advisory, x_refsource_SECUNIA
	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc	vendor-advisory, x_refsource_NETBSD
	http://www.securityfocus.com/archive/1/515055/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/34509	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/49431	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/35181	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/38834	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996	vdb-entry, signature, x_refsource_OVAL
	https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html	mailing-list, x_refsource_MLIST
	http://www.vupen.com/english/advisories/2010/3126	vdb-entry, x_refsource_VUPEN
	http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html	x_refsource_CONFIRM
	http://support.apple.com/kb/HT3865	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/1220	vdb-entry, x_refsource_VUPEN
	http://www.openssl.org/news/secadv_20090325.txt	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2009/1548	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/36701	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm	x_refsource_CONFIRM
	http://www.vmware.com/security/advisories/VMSA-2010-0019.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=125017764422557&w=2	vendor-advisory, x_refsource_HP
	https://kb.bluecoat.com/index?page=content&id=SA50	x_refsource_CONFIRM
	http://secunia.com/advisories/34460	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=bugtraq&m=125017764422557&w=2	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/34256	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/42733	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2010/0528	vdb-entry, x_refsource_VUPEN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-07T04:40:04.972Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "SSRT090059",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=124464882609472&w=2",
               },
               {
                  name: "ADV-2009-0850",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2009/0850",
               },
               {
                  name: "1021905",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://securitytracker.com/id?1021905",
               },
               {
                  name: "34896",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/34896",
               },
               {
                  name: "MDVSA-2009:087",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_MANDRIVA",
                     "x_transferred",
                  ],
                  url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:087",
               },
               {
                  name: "ADV-2009-1175",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2009/1175",
               },
               {
                  name: "42724",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/42724",
               },
               {
                  name: "20090403 rPSA-2009-0057-1 m2crypto openssl openssl-scripts",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/502429/100/0/threaded",
               },
               {
                  name: "SUSE-SU-2011:0847",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://wiki.rpath.com/Advisories:rPSA-2009-0057",
               },
               {
                  name: "DSA-1763",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2009/dsa-1763",
               },
               {
                  name: "38794",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38794",
               },
               {
                  name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847",
               },
               {
                  name: "34960",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/34960",
               },
               {
                  name: "openSUSE-SU-2011:0845",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057",
               },
               {
                  name: "34666",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/34666",
               },
               {
                  name: "USN-750-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/usn-750-1",
               },
               {
                  name: "FreeBSD-SA-09:08",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc",
               },
               {
                  name: "HPSBUX02435",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=124464882609472&w=2",
               },
               {
                  name: "ADV-2009-1020",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2009/1020",
               },
               {
                  name: "35729",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35729",
               },
               {
                  name: "RHSA-2009:1335",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
               },
               {
                  name: "52864",
                  tags: [
                     "vdb-entry",
                     "x_refsource_OSVDB",
                     "x_transferred",
                  ],
                  url: "http://www.osvdb.org/52864",
               },
               {
                  name: "34561",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/34561",
               },
               {
                  name: "35380",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35380",
               },
               {
                  name: "HPSBOV02540",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=127678688104458&w=2",
               },
               {
                  name: "42467",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/42467",
               },
               {
                  name: "APPLE-SA-2009-09-10-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
               },
               {
                  name: "35065",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35065",
               },
               {
                  name: "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html",
               },
               {
                  name: "oval:org.mitre.oval:def:10198",
                  tags: [
                     "vdb-entry",
                     "signature",
                     "x_refsource_OVAL",
                     "x_transferred",
                  ],
                  url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198",
               },
               {
                  name: "36533",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/36533",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.php.net/archive/2009.php#id2009-04-08-1",
               },
               {
                  name: "34411",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/34411",
               },
               {
                  name: "NetBSD-SA2009-008",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_NETBSD",
                     "x_transferred",
                  ],
                  url: "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc",
               },
               {
                  name: "20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/515055/100/0/threaded",
               },
               {
                  name: "34509",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/34509",
               },
               {
                  name: "openssl-asn1-stringprintex-dos(49431)",
                  tags: [
                     "vdb-entry",
                     "x_refsource_XF",
                     "x_transferred",
                  ],
                  url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/49431",
               },
               {
                  name: "35181",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35181",
               },
               {
                  name: "258048",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUNALERT",
                     "x_transferred",
                  ],
                  url: "http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1",
               },
               {
                  name: "38834",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38834",
               },
               {
                  name: "SUSE-SR:2009:010",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
               },
               {
                  name: "oval:org.mitre.oval:def:6996",
                  tags: [
                     "vdb-entry",
                     "signature",
                     "x_refsource_OVAL",
                     "x_transferred",
                  ],
                  url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996",
               },
               {
                  name: "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html",
               },
               {
                  name: "ADV-2010-3126",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2010/3126",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.apple.com/kb/HT3865",
               },
               {
                  name: "ADV-2009-1220",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2009/1220",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.openssl.org/news/secadv_20090325.txt",
               },
               {
                  name: "ADV-2009-1548",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2009/1548",
               },
               {
                  name: "36701",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/36701",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.vmware.com/security/advisories/VMSA-2010-0019.html",
               },
               {
                  name: "HPSBMA02447",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=125017764422557&w=2",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kb.bluecoat.com/index?page=content&id=SA50",
               },
               {
                  name: "34460",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/34460",
               },
               {
                  name: "SSRT090062",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=125017764422557&w=2",
               },
               {
                  name: "34256",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/34256",
               },
               {
                  name: "42733",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/42733",
               },
               {
                  name: "ADV-2010-0528",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2010/0528",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2009-03-25T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-10-10T18:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "SSRT090059",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=124464882609472&w=2",
            },
            {
               name: "ADV-2009-0850",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2009/0850",
            },
            {
               name: "1021905",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://securitytracker.com/id?1021905",
            },
            {
               name: "34896",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/34896",
            },
            {
               name: "MDVSA-2009:087",
               tags: [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
               ],
               url: "http://www.mandriva.com/security/advisories?name=MDVSA-2009:087",
            },
            {
               name: "ADV-2009-1175",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2009/1175",
            },
            {
               name: "42724",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/42724",
            },
            {
               name: "20090403 rPSA-2009-0057-1 m2crypto openssl openssl-scripts",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/502429/100/0/threaded",
            },
            {
               name: "SUSE-SU-2011:0847",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://wiki.rpath.com/Advisories:rPSA-2009-0057",
            },
            {
               name: "DSA-1763",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2009/dsa-1763",
            },
            {
               name: "38794",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38794",
            },
            {
               name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847",
            },
            {
               name: "34960",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/34960",
            },
            {
               name: "openSUSE-SU-2011:0845",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0057",
            },
            {
               name: "34666",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/34666",
            },
            {
               name: "USN-750-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/usn-750-1",
            },
            {
               name: "FreeBSD-SA-09:08",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "http://security.FreeBSD.org/advisories/FreeBSD-SA-09:08.openssl.asc",
            },
            {
               name: "HPSBUX02435",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=124464882609472&w=2",
            },
            {
               name: "ADV-2009-1020",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2009/1020",
            },
            {
               name: "35729",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35729",
            },
            {
               name: "RHSA-2009:1335",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
            },
            {
               name: "52864",
               tags: [
                  "vdb-entry",
                  "x_refsource_OSVDB",
               ],
               url: "http://www.osvdb.org/52864",
            },
            {
               name: "34561",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/34561",
            },
            {
               name: "35380",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35380",
            },
            {
               name: "HPSBOV02540",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=127678688104458&w=2",
            },
            {
               name: "42467",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/42467",
            },
            {
               name: "APPLE-SA-2009-09-10-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html",
            },
            {
               name: "35065",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35065",
            },
            {
               name: "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html",
            },
            {
               name: "oval:org.mitre.oval:def:10198",
               tags: [
                  "vdb-entry",
                  "signature",
                  "x_refsource_OVAL",
               ],
               url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10198",
            },
            {
               name: "36533",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/36533",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.php.net/archive/2009.php#id2009-04-08-1",
            },
            {
               name: "34411",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/34411",
            },
            {
               name: "NetBSD-SA2009-008",
               tags: [
                  "vendor-advisory",
                  "x_refsource_NETBSD",
               ],
               url: "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc",
            },
            {
               name: "20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/515055/100/0/threaded",
            },
            {
               name: "34509",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/34509",
            },
            {
               name: "openssl-asn1-stringprintex-dos(49431)",
               tags: [
                  "vdb-entry",
                  "x_refsource_XF",
               ],
               url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/49431",
            },
            {
               name: "35181",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35181",
            },
            {
               name: "258048",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUNALERT",
               ],
               url: "http://sunsolve.sun.com/search/document.do?assetkey=1-26-258048-1",
            },
            {
               name: "38834",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38834",
            },
            {
               name: "SUSE-SR:2009:010",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html",
            },
            {
               name: "oval:org.mitre.oval:def:6996",
               tags: [
                  "vdb-entry",
                  "signature",
                  "x_refsource_OVAL",
               ],
               url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6996",
            },
            {
               name: "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html",
            },
            {
               name: "ADV-2010-3126",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2010/3126",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.apple.com/kb/HT3865",
            },
            {
               name: "ADV-2009-1220",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2009/1220",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.openssl.org/news/secadv_20090325.txt",
            },
            {
               name: "ADV-2009-1548",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2009/1548",
            },
            {
               name: "36701",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/36701",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.avaya.com/elmodocs2/security/ASA-2009-172.htm",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.vmware.com/security/advisories/VMSA-2010-0019.html",
            },
            {
               name: "HPSBMA02447",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=125017764422557&w=2",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kb.bluecoat.com/index?page=content&id=SA50",
            },
            {
               name: "34460",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/34460",
            },
            {
               name: "SSRT090062",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=125017764422557&w=2",
            },
            {
               name: "34256",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/34256",
            },
            {
               name: "42733",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/42733",
            },
            {
               name: "ADV-2010-0528",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2010/0528",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2009-0590",
      datePublished: "2009-03-27T16:00:00",
      dateReserved: "2009-02-13T00:00:00",
      dateUpdated: "2024-08-07T04:40:04.972Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2006-7250

Vulnerability from cvelistv5

Published

2012-02-29 11:00

Modified

2024-08-07 20:57

Severity ?

Summary

The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.

References

▼	URL	Tags
	https://bugzilla.novell.com/show_bug.cgi?id=748738	x_refsource_CONFIRM
	http://secunia.com/advisories/48516	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/48899	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=openssl-dev&m=115685408414194&w=2	mailing-list, x_refsource_MLIST
	http://www.mail-archive.com/openssl-dev%40openssl.org/msg30305.html	mailing-list, x_refsource_MLIST
	http://www.redhat.com/support/errata/RHSA-2009-1335.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/52181	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/36533	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/USN-1424-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=798100	x_refsource_CONFIRM
	http://cvs.openssl.org/chngview?cn=22144	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2012/02/27/10	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2012/02/28/14	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/48153	third-party-advisory, x_refsource_SECUNIA
	http://marc.info/?l=bugtraq&m=133728068926468&w=2	vendor-advisory, x_refsource_HP
	http://marc.info/?l=bugtraq&m=133728068926468&w=2	vendor-advisory, x_refsource_HP

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-07T20:57:40.840Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.novell.com/show_bug.cgi?id=748738",
               },
               {
                  name: "48516",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/48516",
               },
               {
                  name: "48899",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/48899",
               },
               {
                  name: "[openssl-dev] 20060829 Crash inside SMIME_read_PKCS7 if input is not MIME",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=openssl-dev&m=115685408414194&w=2",
               },
               {
                  name: "[openssl-dev] 20120210 [openssl.org #2711] Fix possible NULL dereference on bad MIME headers",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.mail-archive.com/openssl-dev%40openssl.org/msg30305.html",
               },
               {
                  name: "RHSA-2009:1335",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
               },
               {
                  name: "52181",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/52181",
               },
               {
                  name: "36533",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/36533",
               },
               {
                  name: "USN-1424-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-1424-1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=798100",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://cvs.openssl.org/chngview?cn=22144",
               },
               {
                  name: "[oss-security] 20120227 CVE request: openssl: null pointer dereference issue",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2012/02/27/10",
               },
               {
                  name: "[oss-security] 20120228 Re: CVE request: openssl: null pointer dereference issue",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2012/02/28/14",
               },
               {
                  name: "48153",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/48153",
               },
               {
                  name: "HPSBUX02782",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=133728068926468&w=2",
               },
               {
                  name: "SSRT100844",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=133728068926468&w=2",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2006-08-29T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-05T18:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.novell.com/show_bug.cgi?id=748738",
            },
            {
               name: "48516",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/48516",
            },
            {
               name: "48899",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/48899",
            },
            {
               name: "[openssl-dev] 20060829 Crash inside SMIME_read_PKCS7 if input is not MIME",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://marc.info/?l=openssl-dev&m=115685408414194&w=2",
            },
            {
               name: "[openssl-dev] 20120210 [openssl.org #2711] Fix possible NULL dereference on bad MIME headers",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.mail-archive.com/openssl-dev%40openssl.org/msg30305.html",
            },
            {
               name: "RHSA-2009:1335",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
            },
            {
               name: "52181",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/52181",
            },
            {
               name: "36533",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/36533",
            },
            {
               name: "USN-1424-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-1424-1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=798100",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://cvs.openssl.org/chngview?cn=22144",
            },
            {
               name: "[oss-security] 20120227 CVE request: openssl: null pointer dereference issue",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2012/02/27/10",
            },
            {
               name: "[oss-security] 20120228 Re: CVE request: openssl: null pointer dereference issue",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2012/02/28/14",
            },
            {
               name: "48153",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/48153",
            },
            {
               name: "HPSBUX02782",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=133728068926468&w=2",
            },
            {
               name: "SSRT100844",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=133728068926468&w=2",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2006-7250",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.novell.com/show_bug.cgi?id=748738",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.novell.com/show_bug.cgi?id=748738",
                  },
                  {
                     name: "48516",
                     refsource: "SECUNIA",
                     url: "http://secunia.com/advisories/48516",
                  },
                  {
                     name: "48899",
                     refsource: "SECUNIA",
                     url: "http://secunia.com/advisories/48899",
                  },
                  {
                     name: "[openssl-dev] 20060829 Crash inside SMIME_read_PKCS7 if input is not MIME",
                     refsource: "MLIST",
                     url: "http://marc.info/?l=openssl-dev&m=115685408414194&w=2",
                  },
                  {
                     name: "[openssl-dev] 20120210 [openssl.org #2711] Fix possible NULL dereference on bad MIME headers",
                     refsource: "MLIST",
                     url: "http://www.mail-archive.com/openssl-dev@openssl.org/msg30305.html",
                  },
                  {
                     name: "RHSA-2009:1335",
                     refsource: "REDHAT",
                     url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
                  },
                  {
                     name: "52181",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/52181",
                  },
                  {
                     name: "36533",
                     refsource: "SECUNIA",
                     url: "http://secunia.com/advisories/36533",
                  },
                  {
                     name: "USN-1424-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-1424-1",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=798100",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=798100",
                  },
                  {
                     name: "http://cvs.openssl.org/chngview?cn=22144",
                     refsource: "CONFIRM",
                     url: "http://cvs.openssl.org/chngview?cn=22144",
                  },
                  {
                     name: "[oss-security] 20120227 CVE request: openssl: null pointer dereference issue",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2012/02/27/10",
                  },
                  {
                     name: "[oss-security] 20120228 Re: CVE request: openssl: null pointer dereference issue",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2012/02/28/14",
                  },
                  {
                     name: "48153",
                     refsource: "SECUNIA",
                     url: "http://secunia.com/advisories/48153",
                  },
                  {
                     name: "HPSBUX02782",
                     refsource: "HP",
                     url: "http://marc.info/?l=bugtraq&m=133728068926468&w=2",
                  },
                  {
                     name: "SSRT100844",
                     refsource: "HP",
                     url: "http://marc.info/?l=bugtraq&m=133728068926468&w=2",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2006-7250",
      datePublished: "2012-02-29T11:00:00",
      dateReserved: "2011-12-19T00:00:00",
      dateUpdated: "2024-08-07T20:57:40.840Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2009-1386

Vulnerability from cvelistv5

Published

2009-06-04 16:00

Modified

2024-08-07 05:13

Severity ?

Summary

ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.

References

▼	URL	Tags
	http://secunia.com/advisories/38794	third-party-advisory, x_refsource_SECUNIA
	http://lists.vmware.com/pipermail/security-announce/2010/000082.html	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/35729	third-party-advisory, x_refsource_SECUNIA
	http://cvs.openssl.org/chngview?cn=17369	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2009/06/02/1	mailing-list, x_refsource_MLIST
	http://www.redhat.com/support/errata/RHSA-2009-1335.html	vendor-advisory, x_refsource_REDHAT
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/36533	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11179	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/USN-792-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7469	vdb-entry, signature, x_refsource_OVAL
	http://rt.openssl.org/Ticket/Display.html?id=1679&user=guest&pass=guest	x_refsource_CONFIRM
	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc	vendor-advisory, x_refsource_NETBSD
	http://secunia.com/advisories/38834	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/50963	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/35685	third-party-advisory, x_refsource_SECUNIA
	https://www.exploit-db.com/exploits/8873	exploit, x_refsource_EXPLOIT-DB
	http://secunia.com/advisories/35571	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/35174	vdb-entry, x_refsource_BID
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444	vendor-advisory, x_refsource_HP
	http://www.vupen.com/english/advisories/2010/0528	vdb-entry, x_refsource_VUPEN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-07T05:13:25.487Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "38794",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38794",
               },
               {
                  name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
               },
               {
                  name: "35729",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35729",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://cvs.openssl.org/chngview?cn=17369",
               },
               {
                  name: "[oss-security] 20090602 Re: Two OpenSSL DTLS remote DoS",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2009/06/02/1",
               },
               {
                  name: "RHSA-2009:1335",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
               },
               {
                  name: "HPSBMA02492",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
               },
               {
                  name: "36533",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/36533",
               },
               {
                  name: "oval:org.mitre.oval:def:11179",
                  tags: [
                     "vdb-entry",
                     "signature",
                     "x_refsource_OVAL",
                     "x_transferred",
                  ],
                  url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11179",
               },
               {
                  name: "USN-792-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-792-1",
               },
               {
                  name: "oval:org.mitre.oval:def:7469",
                  tags: [
                     "vdb-entry",
                     "signature",
                     "x_refsource_OVAL",
                     "x_transferred",
                  ],
                  url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7469",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://rt.openssl.org/Ticket/Display.html?id=1679&user=guest&pass=guest",
               },
               {
                  name: "NetBSD-SA2009-009",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_NETBSD",
                     "x_transferred",
                  ],
                  url: "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
               },
               {
                  name: "38834",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/38834",
               },
               {
                  name: "openssl-changecipherspec-dos(50963)",
                  tags: [
                     "vdb-entry",
                     "x_refsource_XF",
                     "x_transferred",
                  ],
                  url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/50963",
               },
               {
                  name: "35685",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35685",
               },
               {
                  name: "8873",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/8873",
               },
               {
                  name: "35571",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/35571",
               },
               {
                  name: "SUSE-SR:2009:012",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
               },
               {
                  name: "35174",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/35174",
               },
               {
                  name: "SSRT100079",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
               },
               {
                  name: "ADV-2010-0528",
                  tags: [
                     "vdb-entry",
                     "x_refsource_VUPEN",
                     "x_transferred",
                  ],
                  url: "http://www.vupen.com/english/advisories/2010/0528",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2009-06-02T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-09-28T12:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "38794",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38794",
            },
            {
               name: "[security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://lists.vmware.com/pipermail/security-announce/2010/000082.html",
            },
            {
               name: "35729",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35729",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://cvs.openssl.org/chngview?cn=17369",
            },
            {
               name: "[oss-security] 20090602 Re: Two OpenSSL DTLS remote DoS",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2009/06/02/1",
            },
            {
               name: "RHSA-2009:1335",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://www.redhat.com/support/errata/RHSA-2009-1335.html",
            },
            {
               name: "HPSBMA02492",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
            },
            {
               name: "36533",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/36533",
            },
            {
               name: "oval:org.mitre.oval:def:11179",
               tags: [
                  "vdb-entry",
                  "signature",
                  "x_refsource_OVAL",
               ],
               url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11179",
            },
            {
               name: "USN-792-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-792-1",
            },
            {
               name: "oval:org.mitre.oval:def:7469",
               tags: [
                  "vdb-entry",
                  "signature",
                  "x_refsource_OVAL",
               ],
               url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7469",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://rt.openssl.org/Ticket/Display.html?id=1679&user=guest&pass=guest",
            },
            {
               name: "NetBSD-SA2009-009",
               tags: [
                  "vendor-advisory",
                  "x_refsource_NETBSD",
               ],
               url: "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-009.txt.asc",
            },
            {
               name: "38834",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/38834",
            },
            {
               name: "openssl-changecipherspec-dos(50963)",
               tags: [
                  "vdb-entry",
                  "x_refsource_XF",
               ],
               url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/50963",
            },
            {
               name: "35685",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35685",
            },
            {
               name: "8873",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/8873",
            },
            {
               name: "35571",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/35571",
            },
            {
               name: "SUSE-SR:2009:012",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",
            },
            {
               name: "35174",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/35174",
            },
            {
               name: "SSRT100079",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444",
            },
            {
               name: "ADV-2010-0528",
               tags: [
                  "vdb-entry",
                  "x_refsource_VUPEN",
               ],
               url: "http://www.vupen.com/english/advisories/2010/0528",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2009-1386",
      datePublished: "2009-06-04T16:00:00",
      dateReserved: "2009-04-23T00:00:00",
      dateUpdated: "2024-08-07T05:13:25.487Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature